Record the P07-01-WX auxiliary acceptance and keep original P07-01 open

P07-01-WX (natural weather, rain arrivals and stay, storm, world tree
and adult fog effects, HUD forecast, save and migration) passed all
four normal gates: validation, review, integration and final. A fresh
separate Opus review passed WX1-WX8 with no high or medium finding and
two lows. S db87270 -> Q 9b5b09b with the same tree; the measurements
are on S.

Original credit is 0, so the count stays 24/88 and 4/30. Original
P07-01 moves from planned to in_progress. The furnace yield 120 at fog
boundaries and AR.weather.fog_magic remain, waiting for the P13 furnace
facility, D04 and the A06 separate approval. The event-log name of the
weather event and the two review lows are disclosed. Earlier failures
and changes_requested reviews are kept.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Makefile

@@ -63,6 +63,12 @@ test-s2:
 	$(GODOT) --headless --path . --script res://tests/s2/test_economy_service.gd
 	$(GODOT) --headless --path . --script res://tests/s2/test_ledger_backed_resources.gd
 	$(GODOT) --headless --path . --script res://tests/s2/test_mana_network_service.gd
+	$(GODOT) --headless --path . --script res://tests/s2/test_mana_reserve_cycle.gd
+	$(GODOT) --headless --path . --script res://tests/s2/test_runtime_mana_reserve.gd
+	$(GODOT) --headless --path . --script res://tests/s2/test_mana_reserve_new_pid.gd -- writer
+	$(GODOT) --headless --path . --script res://tests/s2/test_mana_reserve_new_pid.gd -- reader
+	$(GODOT) --headless --path . --script res://tests/s2/test_mana_recovery_new_pid.gd -- writer
+	$(GODOT) --headless --path . --script res://tests/s2/test_mana_recovery_new_pid.gd -- reader
 	$(GODOT) --headless --path . --script res://tests/s2/test_runtime_operations_cycle.gd
 
 test-s3:
@@ -95,6 +101,9 @@ test-s6:
 
 test-mvp:
 	$(GODOT) --headless --path . --script res://tests/mvp/test_premium_room_guest_flow.gd
+	$(GODOT) --headless --path . --script res://tests/mvp/test_runtime_mana_depletion.gd
+	$(GODOT) --headless --path . --script res://tests/mvp/test_whole_tower_outage.gd -- writer
+	$(GODOT) --headless --path . --script res://tests/mvp/test_whole_tower_outage.gd -- reader
 	$(GODOT) --headless --path . --script res://tests/mvp/test_premium_room.gd
 	$(GODOT) --headless --path . --script res://tests/mvp/test_original_room_zones.gd
 	$(GODOT) --headless --path . --script res://tests/mvp/test_upkeep_loss_streak.gd
@@ -231,6 +240,12 @@ test-transport:
 	$(GODOT) --headless --path . --script res://tests/transport/test_transport_density_migration.gd
 	$(GODOT) --headless --path . --script res://tests/transport/test_transport_boundaries.gd
 	$(GODOT) --headless --path . --script res://tests/transport/test_runtime_transport.gd
+	$(GODOT) --headless --path . --script res://tests/transport/test_runtime_warp.gd -- writer
+	$(GODOT) --headless --path . --script res://tests/transport/test_runtime_warp.gd -- reader
+	$(GODOT) --headless --path . --script res://tests/transport/test_route_wait_choice.gd
+	$(GODOT) --headless --path . --script res://tests/transport/test_route_wait_choice.gd -- writer
+	$(GODOT) --headless --path . --script res://tests/transport/test_route_wait_choice.gd -- reader
+	$(GODOT) --headless --path . --script res://tests/s2/test_new_pid_pairs.gd
 
 capture-transport:
 	THE_TREE_TRANSPORT_CAPTURE=1 $(GODOT) --path . --script res://tests/transport/test_runtime_transport.gd

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ACCEPTANCE.json

@@ -0,0 +1,57 @@
+{
+  "unit_id": "P04-01",
+  "title": "同時発生の更新規約",
+  "original_work": "閉店、停電、破壊、退出、課金、シフト交代、00:00決算の順序を明記する。",
+  "original_acceptance": "順序境界で停止中課金、二重決算、予約の孤立がない。",
+  "accepted": true,
+  "C": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+  "S": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+  "tree": "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+  "normal_candidate_structure_verified": true,
+  "actual_main_matches_C": true,
+  "source_Q_applicability_verified": true,
+  "selected_source_files_all_actual_SHA_equal": 1369,
+  "runner_records_consistent": true,
+  "all15_plus_EV_verified": true,
+  "all_seven_domains_verified": true,
+  "all_six_actual_D05_approvals_preserved": true,
+  "native6_and_24_owned_phases_pass": true,
+  "registered_four_gates": [
+    {
+      "kind": "validation",
+      "commit_sha": "785815002eb750b0bef3c26fe2ca492b16b280be",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7e1c6381e5fb4c7f903d8bec7cfbdb84-validation.json",
+      "passed": 1
+    },
+    {
+      "kind": "review",
+      "commit_sha": "785815002eb750b0bef3c26fe2ca492b16b280be",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/01b99749cab449ad8052e6dfe031162f/result.json",
+      "passed": 1
+    },
+    {
+      "kind": "integration",
+      "commit_sha": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/d75224c26cca4bf197e5438693d0f8a0-integration.json",
+      "passed": 1
+    },
+    {
+      "kind": "final",
+      "commit_sha": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/08c6bb8df052494792477242866eaa70-final.json",
+      "passed": 1
+    }
+  ],
+  "independent_review_high_medium_critical": 0,
+  "full_regression_execution": "Historical S47 full184/21903/329parse/186owned reused under current unchanged verifier and complete selected-source equivalence; no execution relabel",
+  "test_local_control_execution": "Historical S50, unchanged49 executed files and retained exact1502 inputs; independently accepted reuse; current S51 raw verified separately",
+  "original_packages": 30,
+  "original_units": 88,
+  "formal_before": 16,
+  "formal_after": 17,
+  "partial_credit": false,
+  "whole_goal_accepted": false,
+  "global_remaining": "Windows same-release device, whole UI/content/assets/routes/ends/encyclopedia/performance/save migration/full play and unresolved production values remain separate unmet original requirements",
+  "accepted_at_jst": "2026-10-19T00:54:23.322453+09:00"
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ACTUAL_S51_APPROVED_RUNNER_SNAPSHOT_PIN.json

@@ -0,0 +1,11 @@
+{
+  "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ACTUAL_S51_APPROVED_RUNNER_SNAPSHOT.sqlite",
+  "sha256": "438f09814bcaf80411a2d7861973e37c06a55a9f97bb5cea7e11a6cd7b5ead68",
+  "actual_state": {
+    "state": "approved",
+    "submitted": "785815002eb750b0bef3c26fe2ca492b16b280be",
+    "candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+    "main_base": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81"
+  },
+  "kind": "Real sqlite backup taken after normal approval before integrate"
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/EVIDENCE_MANIFEST.json

@@ -0,0 +1,228 @@
+{
+  "candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+  "submission": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "files": [
+    {
+      "path": "ROOT_S51_ACTUAL_NORMAL_C_DB_JOIN.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_ACTUAL_NORMAL_C_DB_JOIN.json",
+      "bytes": 3364,
+      "sha256": "0e2f2fa7a11c80bc95c492d27c00f8d016551238d6d60def89bdfed75723e8dc"
+    },
+    {
+      "path": "ROOT_S51_ACTUAL_NORMAL_CANDIDATE_AUDIT.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_ACTUAL_NORMAL_CANDIDATE_AUDIT.json",
+      "bytes": 1536,
+      "sha256": "8aee41126cac0f0efb83c4895386eae66b6915282819a7f84a3872da3247debb"
+    },
+    {
+      "path": "ROOT_S51_STANDING_OWNER_AUTHORIZATION_APPLICATION.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_STANDING_OWNER_AUTHORIZATION_APPLICATION.json",
+      "bytes": 739,
+      "sha256": "244b9b53ca1842caba618ca4ea846ff97d334b22a4bb6c719b0e43ece1df4922"
+    },
+    {
+      "path": "ACTUAL_S51_APPROVED_RUNNER_SNAPSHOT_PIN.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ACTUAL_S51_APPROVED_RUNNER_SNAPSHOT_PIN.json",
+      "bytes": 561,
+      "sha256": "5ebd29cd0771b67017b562fdd290f21cb8e42f781ef18bf6484369e4405c98cb"
+    },
+    {
+      "path": "ROOT_S51_RETAINED_TEST_LOCAL_CONTROLS_APPLICABILITY.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_RETAINED_TEST_LOCAL_CONTROLS_APPLICABILITY.json",
+      "bytes": 2503,
+      "sha256": "aefd362094cb5b49fd12a52b5db0ef8a6338e099308ea5f1f04eab8f13db0f1f"
+    },
+    {
+      "path": "ROOT_S51_RAW_CROSS_VERSION_SCOPE.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_RAW_CROSS_VERSION_SCOPE.json",
+      "bytes": 2523,
+      "sha256": "20fe4bfba87fc4591658e0aec03a519c7bc81fe98ce1a6ef1200f470eb953b85"
+    },
+    {
+      "path": "ROOT_S51_M_SOURCE_SUBRANGE_CROSSWALK.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_M_SOURCE_SUBRANGE_CROSSWALK.json",
+      "bytes": 10479,
+      "sha256": "339444c1c36ab445c1041c4445fe2813667c1a5aefc482def07c300e18921f17"
+    },
+    {
+      "path": "ROOT_S51_POST_REVIEW_EXIT_SOURCE_EXCERPT.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_POST_REVIEW_EXIT_SOURCE_EXCERPT.json",
+      "bytes": 3868,
+      "sha256": "f6a306965d8249e671b4311fae217b2d6b0d7cbfafead0b5a21b181cbbb0d8c2"
+    },
+    {
+      "path": "ROOT_Q51_NATIVE_BATCH_PROGRESS.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_NATIVE_BATCH_PROGRESS.json",
+      "bytes": 9299,
+      "sha256": "2b688005703c7660c64fd7f0ae83d960eba97ca050122fca5e8bc1693aba4c91"
+    },
+    {
+      "path": "ROOT_S51_INDEX_AND_FULL_EXISTING_ROUTE.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_INDEX_AND_FULL_EXISTING_ROUTE.json",
+      "bytes": 422114,
+      "sha256": "d0ba3fd38a97ec7b1cd66d87b8b0d0cd8565166b31b79351954303451a0041f1"
+    },
+    {
+      "path": "ROOT_S51_PROOF_READ_SCOPE_CONTROLS.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_PROOF_READ_SCOPE_CONTROLS.json",
+      "bytes": 3933,
+      "sha256": "f6fc45dfc86d6fde040433f5b562605aabd2776daff3fad0eb95c2c64a67c77f"
+    },
+    {
+      "path": "ROOT_S51_CURRENT_BEFORE_WHOLE_REVIEW.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_CURRENT_BEFORE_WHOLE_REVIEW.json",
+      "bytes": 4499,
+      "sha256": "8a4b254f38c5c4f47df2e8cfb054c22f50e08cb30ebff9648fe5d8686da780cc"
+    },
+    {
+      "path": "ROOT_78581500_REVIEW_SUPPLEMENT.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_78581500_REVIEW_SUPPLEMENT.json",
+      "bytes": 4908,
+      "sha256": "77493f32d6525f0c717adfc348240ace538299c43ff39880e247874ec7623f41"
+    },
+    {
+      "path": "accepted-index.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-evidence/index.json",
+      "bytes": 3214632,
+      "sha256": "d25097e8ea4f1b2617e299b69fdf4a0f530d76e9f51daace0dabcb525ba7ba49"
+    },
+    {
+      "path": "historical-full-source-map.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-final-full-2cd73406-controller/run/source-start.json",
+      "bytes": 416197,
+      "sha256": "f3bedbcad504c42904017dd64029d5e008372ea6bcfd93e6f88c34fa24b963bf"
+    },
+    {
+      "path": "review-root-material-manifest.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-root-acceptance-78581500/ROOT_MATERIAL_MANIFEST.json",
+      "bytes": 12175,
+      "sha256": "7f27e52e23892ee079ae124e5f5af18ecff28b99a498f7e4bbdecece2eeae0cc"
+    },
+    {
+      "path": "validation/receipt.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7e1c6381e5fb4c7f903d8bec7cfbdb84-validation.json",
+      "bytes": 365,
+      "sha256": "a5b40c80ba8ac307ec825b89a4384284b6dbcbf93d4b8f1d2c54f772fedd380c"
+    },
+    {
+      "path": "validation/command.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/command.json",
+      "bytes": 729,
+      "sha256": "f591fedfa02ebc70fffe0f6ea44a752854d72d7a91a43ae66802ccef4ea0a583"
+    },
+    {
+      "path": "validation/stdout.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/stdout.log",
+      "bytes": 170,
+      "sha256": "562d7ec566286433aa2cceb39a40f4fdecfe65b349be00d885c7c87575fb9041"
+    },
+    {
+      "path": "validation/stderr.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/stderr.log",
+      "bytes": 0,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "path": "validation/sandbox.sb",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/sandbox.sb",
+      "bytes": 2132,
+      "sha256": "de905ae8f6f4f29d101e7cd7cbff66945fba137cd922ac4efd09923afbb084f1"
+    },
+    {
+      "path": "review/receipt.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/01b99749cab449ad8052e6dfe031162f/result.json",
+      "bytes": 8091,
+      "sha256": "11ba2641723bf09560e01ee7d67e543c14946d696718c3bff83081319e71be1b"
+    },
+    {
+      "path": "review/command.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/01b99749cab449ad8052e6dfe031162f/command.json",
+      "bytes": 1836,
+      "sha256": "77ee9a18a0409c28bf9563eab6aff8d4a399d755effb20e21e8edd0e1f69d4be"
+    },
+    {
+      "path": "review/stdout.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/01b99749cab449ad8052e6dfe031162f/stdout.log",
+      "bytes": 17699,
+      "sha256": "dd6596e4ea056d7e4b51024052672a2c2a4ac62ab1afa66740adb889e1c00986"
+    },
+    {
+      "path": "review/stderr.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/01b99749cab449ad8052e6dfe031162f/stderr.log",
+      "bytes": 0,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "path": "integration/receipt.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/d75224c26cca4bf197e5438693d0f8a0-integration.json",
+      "bytes": 366,
+      "sha256": "fd7a27ae2d574dd451e0f0af3d59d9a890aac844aae139d8cb183683014177fd"
+    },
+    {
+      "path": "integration/command.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/927c4dd5e24345bc876cd2b69482b37e/command.json",
+      "bytes": 730,
+      "sha256": "d35a03ac21979d62fd1106faac3d092bd98efae07c158ae16914c62f13e6fdb2"
+    },
+    {
+      "path": "integration/stdout.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/927c4dd5e24345bc876cd2b69482b37e/stdout.log",
+      "bytes": 164,
+      "sha256": "fe0adf989ae31aa07fdc56b5a4a19ab9d794abed12c0920f08d1a5414c89c39d"
+    },
+    {
+      "path": "integration/stderr.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/927c4dd5e24345bc876cd2b69482b37e/stderr.log",
+      "bytes": 0,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "path": "integration/sandbox.sb",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/927c4dd5e24345bc876cd2b69482b37e/sandbox.sb",
+      "bytes": 2133,
+      "sha256": "4dfb2bf82a28339f8e0bbb8866c727bb761e9077809a7a044f4fa08b92fb79cb"
+    },
+    {
+      "path": "final/receipt.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/08c6bb8df052494792477242866eaa70-final.json",
+      "bytes": 360,
+      "sha256": "6b65fb1503db640b505378bc2208cc8b3f8313dbbb74d7be80ae5d5bc6a32abe"
+    },
+    {
+      "path": "final/command.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7c7cf5e5b35944a2bec0d54564ac94eb/command.json",
+      "bytes": 724,
+      "sha256": "d29637a8c1c7ebb1d16b5dfca3c6197c1439757fe8a5db0dd44acf848a6933af"
+    },
+    {
+      "path": "final/stdout.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7c7cf5e5b35944a2bec0d54564ac94eb/stdout.log",
+      "bytes": 164,
+      "sha256": "fe0adf989ae31aa07fdc56b5a4a19ab9d794abed12c0920f08d1a5414c89c39d"
+    },
+    {
+      "path": "final/stderr.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7c7cf5e5b35944a2bec0d54564ac94eb/stderr.log",
+      "bytes": 0,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "path": "final/sandbox.sb",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7c7cf5e5b35944a2bec0d54564ac94eb/sandbox.sb",
+      "bytes": 2127,
+      "sha256": "00b0d282a2df0be976dd6d3da712ad7b36a984de0cc7662dd12b56911390e8fb"
+    },
+    {
+      "path": "complete-review-material-manifest.json.gz",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-review-37845ae6/.review-material/manifest.json",
+      "source_bytes": 30146627,
+      "source_sha256": "81782ade4e6a5f9a099dab8a33a76b0c8a6d1fccf065f4540a8dac5973de3c95",
+      "lossless_gzip_roundtrip_verified": true,
+      "bytes": 3814052,
+      "sha256": "547d2e98bcee02136f92ac9ff686791b794b9163d2451799311f5db6925728bf"
+    }
+  ],
+  "retained_raw_root": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build",
+  "raw_deleted": false,
+  "original_count": 88
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_78581500_REVIEW_SUPPLEMENT.json

@@ -0,0 +1,38 @@
+{
+  "task_id": "P04-01",
+  "S": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+  "diagnostic_Q_tree": "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+  "normal_candidate_C": null,
+  "original30": 30,
+  "original88": 88,
+  "formally_completed": 16,
+  "P04_credit": 0,
+  "formal_acceptance": false,
+  "scope": "Independent whole original P04-01, all seven domains and 15+EV, all six real D05 approvals, all prior high/medium. No unit credit from counts or partial passes.",
+  "navigation": {
+    "current_snapshot": ".review-material/build/audit-support/p04-root-acceptance-78581500/ROOT_S51_CURRENT_BEFORE_WHOLE_REVIEW.json",
+    "all_original_conditions": ".review-material/build/audit-support/p04-root-acceptance-78581500/P04_REQUIRED_CONDITION_MATRIX_78581500_PRE_REVIEW.json",
+    "all_current_root_material": ".review-material/build/audit-support/p04-root-acceptance-78581500/ROOT_MATERIAL_MANIFEST.json",
+    "current_index": ".review-material/build/p04-evidence/index.json",
+    "current_collection": ".review-material/build/audit-support/p04-raw-collect-q5101/",
+    "current_native": ".review-material/build/p04-s1-DIAG-r51 through p04-s5-DIAG-r51 including s2a/s2b",
+    "prior_S50_review": ".review-material/build/audit-support/p04-root-acceptance-78581500/prior-independent-S50-review/result.json",
+    "older_prior_review_map": ".review-material/build/audit-support/p04-root-acceptance-2cd73406/PRIOR_ACTUAL_REVIEW_MAP.json",
+    "original_S50_controls": ".review-material/build/audit-support/p04-root-acceptance-a9ef681f/",
+    "original_S47_full": ".review-material/build/p04-final-full-2cd73406-controller/run/",
+    "source_subranges": ".review-material/build/audit-support/p04-root-acceptance-78581500/ROOT_S51_M_SOURCE_SUBRANGE_CROSSWALK.json",
+    "normal_read_input_controls": ".review-material/build/audit-support/p04-root-acceptance-78581500/ROOT_S51_PROOF_READ_SCOPE_CONTROLS.json"
+  },
+  "specific_review_questions": [
+    "Review the complete original acceptance, not merely the five-document diff. Confirm previous high canonical contradiction and medium M source anchors are resolved, and classify any still-material defect honestly.",
+    "Canonical handoff now distinguishes immutable actual S50 facts from S51 pre-submit admission and points to post-submit Root receipts. The actual current S51 native6 and registered validation have now passed; do not interpret the explicitly pre-submit handoff as a present NOT RUN claim. Equally do not infer new execution for historical S50 controls or S47 full.",
+    "Independently inspect retained test-local control applicability: same 49 executed files, original 1502 S50 raw inputs rehashed, same source/settings/engine evidence, no changed closure file. Original order CLI and complete-B identity were not executed again on S51. Entire S51 raw is NOT claimed identical: 1458 data files and G1/G2 guards are literal equal but44 descriptors differ in paths/formal save metadata; see ROOT_S51_RAW_CROSS_VERSION_SCOPE.json. No normalization or receipt substitution was applied. Fresh S51 data is separately checked through unchanged native readers/adapters, collector and registered checker. Reject reuse if a necessary predicate is missing; do not accept counts as evidence.",
+    "Unchanged current full verifier rechecks original S47 full184/21903/329parse/186owned with all1369 selected source SHA equal to current S51 S5. Independently confirm all applicability predicates. Old execution/version/PIDs/times remain old.",
+    "PAUSE-REASON sequential onset is explicitly unresolved/unproven under original approval. Same-tick onset is actually covered. Do not silently narrow the user rule, mark sequential behavior cured or invent authorization. Assess whether this is material to original P04-01 acceptance; explain any remaining global/spec interpretation work.",
+    "The handoff labels three provisional subranges unverified-M-line. Root supplies exact immutable M excerpts and corrected subranges in SOURCE_SUBRANGE_CROSSWALK, including queue8538-8539, exit8782-8784, payment11877/11881. Verify both main function anchors and this explicit crosswalk; do not mistake provisional subranges for proven current line claims.",
+    "Normal validation uses the previously audited exact owned-input read wrapper, only repinned from S50/Qt50 to S51/Qt51 plus unchanged Q47. Actual sandbox positive reads and negative writes/auth/state/sibling controls passed. No checker/contract/product/config/permission expansion. Prior failed S50 validation remains failed.",
+    "Normal prepare, exact real C authorization, integration/final, Root actual DBjoin and ledger/mainpush remain required. Windows/global UI/performance/content/full-play acceptance stays separate and unfulfilled. Original30/88/formal16/P04credit0 remain until whole-unit acceptance."
+  ],
+  "at_unix_ns": 1792337453085524000
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_Q51_NATIVE_BATCH_PROGRESS.json

@@ -0,0 +1,187 @@
+{
+  "S": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "Q_tree": "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+  "rows": [
+    {
+      "series": "s1",
+      "argv": [
+        "/Users/korizatou114/Antigravity/\u74b0\u5883\u69cb\u7bc9/agent-control/.venv/bin/python",
+        "-B",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r51/docs/plans/original-completion-2026-10-02/execution/p04-01/s1/run_s1_native.py",
+        "--main",
+        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+        "--submission",
+        "785815002eb750b0bef3c26fe2ca492b16b280be",
+        "--tested-tree",
+        "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+        "--project-root",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500",
+        "--output",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s1-DIAG-r51",
+        "--plan",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s1-DIAG-r51-plan.json"
+      ],
+      "owner_pid": 42979,
+      "exit_code": 0,
+      "passed": true,
+      "error": null,
+      "output": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s1-DIAG-r51",
+      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_NATIVE_S1.log",
+      "started_at_unix_ns": 1792336535636082000,
+      "ended_at_unix_ns": 1792336603256780000,
+      "free_before": 7180898304,
+      "free_after": 7062007808
+    },
+    {
+      "series": "s2a",
+      "argv": [
+        "/Users/korizatou114/Antigravity/\u74b0\u5883\u69cb\u7bc9/agent-control/.venv/bin/python",
+        "-B",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r51/docs/plans/original-completion-2026-10-02/execution/p04-01/s2/run_s2a_native.py",
+        "--main",
+        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+        "--submission",
+        "785815002eb750b0bef3c26fe2ca492b16b280be",
+        "--tested-tree",
+        "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+        "--project-root",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500",
+        "--output",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s2a-DIAG-r51",
+        "--plan",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s2a-DIAG-r51-plan.json"
+      ],
+      "owner_pid": 44874,
+      "exit_code": 0,
+      "passed": true,
+      "error": null,
+      "output": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s2a-DIAG-r51",
+      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_NATIVE_S2A.log",
+      "started_at_unix_ns": 1792336603257132000,
+      "ended_at_unix_ns": 1792336684987594000,
+      "free_before": 7061987328,
+      "free_after": 6923694080
+    },
+    {
+      "series": "s2b",
+      "argv": [
+        "/Users/korizatou114/Antigravity/\u74b0\u5883\u69cb\u7bc9/agent-control/.venv/bin/python",
+        "-B",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r51/docs/plans/original-completion-2026-10-02/execution/p04-01/s2b/run_s2b_native.py",
+        "--main",
+        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+        "--submission",
+        "785815002eb750b0bef3c26fe2ca492b16b280be",
+        "--tested-tree",
+        "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+        "--project-root",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500",
+        "--output",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s2b-DIAG-r51",
+        "--plan",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s2b-DIAG-r51-plan.json"
+      ],
+      "owner_pid": 46939,
+      "exit_code": 0,
+      "passed": true,
+      "error": null,
+      "output": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s2b-DIAG-r51",
+      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_NATIVE_S2B.log",
+      "started_at_unix_ns": 1792336684987960000,
+      "ended_at_unix_ns": 1792336751123424000,
+      "free_before": 6923694080,
+      "free_after": 6766997504
+    },
+    {
+      "series": "s3",
+      "argv": [
+        "/Users/korizatou114/Antigravity/\u74b0\u5883\u69cb\u7bc9/agent-control/.venv/bin/python",
+        "-B",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r51/docs/plans/original-completion-2026-10-02/execution/p04-01/s3/run_s3_native.py",
+        "--main",
+        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+        "--submission",
+        "785815002eb750b0bef3c26fe2ca492b16b280be",
+        "--tested-tree",
+        "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+        "--project-root",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500",
+        "--output",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s3-DIAG-r51",
+        "--plan",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s3-DIAG-r51-plan.json"
+      ],
+      "owner_pid": 48791,
+      "exit_code": 0,
+      "passed": true,
+      "error": null,
+      "output": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s3-DIAG-r51",
+      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_NATIVE_S3.log",
+      "started_at_unix_ns": 1792336751124054000,
+      "ended_at_unix_ns": 1792336848657819000,
+      "free_before": 6766989312,
+      "free_after": 7561510912
+    },
+    {
+      "series": "s4",
+      "argv": [
+        "/Users/korizatou114/Antigravity/\u74b0\u5883\u69cb\u7bc9/agent-control/.venv/bin/python",
+        "-B",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r51/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py",
+        "--main",
+        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+        "--submission",
+        "785815002eb750b0bef3c26fe2ca492b16b280be",
+        "--tested-tree",
+        "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+        "--project-root",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500",
+        "--output",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s4-DIAG-r51",
+        "--plan",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s4-DIAG-r51-plan.json"
+      ],
+      "owner_pid": 50961,
+      "exit_code": 0,
+      "passed": true,
+      "error": null,
+      "output": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s4-DIAG-r51",
+      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_NATIVE_S4.log",
+      "started_at_unix_ns": 1792336848661583000,
+      "ended_at_unix_ns": 1792336933280467000,
+      "free_before": 7561498624,
+      "free_after": 7461888000
+    },
+    {
+      "series": "s5",
+      "argv": [
+        "/Users/korizatou114/Antigravity/\u74b0\u5883\u69cb\u7bc9/agent-control/.venv/bin/python",
+        "-B",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r51/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
+        "--main",
+        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+        "--submission",
+        "785815002eb750b0bef3c26fe2ca492b16b280be",
+        "--tested-tree",
+        "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+        "--project-root",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500",
+        "--output",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s5-DIAG-r51",
+        "--plan",
+        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s5-DIAG-r51-plan.json"
+      ],
+      "owner_pid": 52983,
+      "exit_code": 0,
+      "passed": true,
+      "error": null,
+      "output": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s5-DIAG-r51",
+      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_NATIVE_S5.log",
+      "started_at_unix_ns": 1792336933281670000,
+      "ended_at_unix_ns": 1792337075161304000,
+      "free_before": 7461883904,
+      "free_after": 6884540416
+    }
+  ],
+  "formal_credit": 0
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_S51_ACTUAL_NORMAL_CANDIDATE_AUDIT.json

@@ -0,0 +1,37 @@
+{
+  "C": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+  "S": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+  "tree": "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+  "parents": [
+    "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+    "785815002eb750b0bef3c26fe2ca492b16b280be"
+  ],
+  "normal_candidate": true,
+  "evidence": [
+    {
+      "kind": "validation",
+      "commit_sha": "785815002eb750b0bef3c26fe2ca492b16b280be",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7e1c6381e5fb4c7f903d8bec7cfbdb84-validation.json",
+      "passed": 1,
+      "sha256": "a5b40c80ba8ac307ec825b89a4384284b6dbcbf93d4b8f1d2c54f772fedd380c"
+    },
+    {
+      "kind": "review",
+      "commit_sha": "785815002eb750b0bef3c26fe2ca492b16b280be",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/01b99749cab449ad8052e6dfe031162f/result.json",
+      "passed": 1,
+      "sha256": "11ba2641723bf09560e01ee7d67e543c14946d696718c3bff83081319e71be1b"
+    },
+    {
+      "kind": "integration",
+      "commit_sha": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/d75224c26cca4bf197e5438693d0f8a0-integration.json",
+      "passed": 1,
+      "sha256": "fd7a27ae2d574dd451e0f0af3d59d9a890aac844aae139d8cb183683014177fd"
+    }
+  ],
+  "main_still_M_clean": true,
+  "formal_credit": 0,
+  "at_unix_ns": 1792338580908879000
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_S51_ACTUAL_NORMAL_C_DB_JOIN.json

@@ -0,0 +1 @@
+{"approved_runner_database": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ACTUAL_S51_APPROVED_RUNNER_SNAPSHOT.sqlite", "input_sha256": {"/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/01b99749cab449ad8052e6dfe031162f/result.json": "11ba2641723bf09560e01ee7d67e543c14946d696718c3bff83081319e71be1b", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/08c6bb8df052494792477242866eaa70-final.json": "6b65fb1503db640b505378bc2208cc8b3f8313dbbb74d7be80ae5d5bc6a32abe", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7c7cf5e5b35944a2bec0d54564ac94eb/command.json": "d29637a8c1c7ebb1d16b5dfca3c6197c1439757fe8a5db0dd44acf848a6933af", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7c7cf5e5b35944a2bec0d54564ac94eb/stderr.log": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7c7cf5e5b35944a2bec0d54564ac94eb/stdout.log": "fe0adf989ae31aa07fdc56b5a4a19ab9d794abed12c0920f08d1a5414c89c39d", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7e1c6381e5fb4c7f903d8bec7cfbdb84-validation.json": "a5b40c80ba8ac307ec825b89a4384284b6dbcbf93d4b8f1d2c54f772fedd380c", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/927c4dd5e24345bc876cd2b69482b37e/command.json": "d35a03ac21979d62fd1106faac3d092bd98efae07c158ae16914c62f13e6fdb2", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/927c4dd5e24345bc876cd2b69482b37e/stderr.log": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/927c4dd5e24345bc876cd2b69482b37e/stdout.log": "fe0adf989ae31aa07fdc56b5a4a19ab9d794abed12c0920f08d1a5414c89c39d", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/d75224c26cca4bf197e5438693d0f8a0-integration.json": "fd7a27ae2d574dd451e0f0af3d59d9a890aac844aae139d8cb183683014177fd", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/command.json": "f591fedfa02ebc70fffe0f6ea44a752854d72d7a91a43ae66802ccef4ea0a583", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/stderr.log": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/stdout.log": "562d7ec566286433aa2cceb39a40f4fdecfe65b349be00d885c7c87575fb9041"}, "join": {"C": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4", "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81", "S": "785815002eb750b0bef3c26fe2ca492b16b280be"}, "protocol": "p04-normal-c-runner-join-v1", "runner_database": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/state.sqlite", "runner_records_consistent": true, "runner_records_sha256": "67ae15e765d238f811f21468a57852f49296135060f7c3086fd82b0cc4ce1f4f", "source_Q_applicability_verified": false, "structure_verified": false, "unit_accepted": false, "whole_goal_accepted": false}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_S51_CURRENT_BEFORE_WHOLE_REVIEW.json

@@ -0,0 +1,99 @@
+{
+  "S": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+  "Q_tree": "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+  "normal_C": null,
+  "actual_registered_validation": {
+    "kind": "validation",
+    "commit_sha": "785815002eb750b0bef3c26fe2ca492b16b280be",
+    "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7e1c6381e5fb4c7f903d8bec7cfbdb84-validation.json",
+    "passed": 1
+  },
+  "all6_native_pass": true,
+  "all24_owned_PIDs_ended": true,
+  "current_conditions": [
+    "EV",
+    "closure_release",
+    "dependency_stop",
+    "destruction_stop",
+    "exit_release",
+    "midnight_replay",
+    "midnight_settlement",
+    "night_staff_absent",
+    "overtime_task",
+    "patience_release",
+    "paused_midnight",
+    "power_stop",
+    "recovery_completion",
+    "same_minute_replay",
+    "save_restore",
+    "shift_completion"
+  ],
+  "missing_conditions": [],
+  "test_local_control_reuse": {
+    "current_submission": "785815002eb750b0bef3c26fe2ca492b16b280be",
+    "historical_control_submission": "a9ef681fb8f3356507d3d6e58ae30a339deb8a6c",
+    "historical_order_execution": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q50_ORIGINAL_ORDER_TYPED_EXECUTION.json",
+    "historical_order_execution_pin": {
+      "bytes": 275993,
+      "sha256": "15b91f1ccc6c6f7d09709055049f157ee0bb6730c0b1c258ee4b9d921b0d60cd"
+    },
+    "historical_order_result_pin": {
+      "bytes": 9126478,
+      "sha256": "9b508092e77f241de593b71c1711dd5e3203b0a8d0e9717abfa20488beb2a3e0"
+    },
+    "historical_identity_result": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S50_COMPLETE_CURRENT_B_IDENTITY.log",
+    "historical_identity_pin": {
+      "bytes": 36990,
+      "sha256": "f05bf544c15b91d997f89ae01965f4acea464f80b42cbf076144971485eddab2"
+    },
+    "unchanged_full_execution_closure_files": 49,
+    "three_snapshot_closures_identical_and_retained": true,
+    "actual_original_raw_files_rehashed_unchanged": 1502,
+    "changed_paths": [
+      "docs/plans/original-completion-2026-10-02/execution/p04-01/CURRENT_STATUS.md",
+      "docs/plans/original-completion-2026-10-02/execution/p04-01/ORDER_AUDIT.md",
+      "docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR51_APPLICABILITY_MAP.json",
+      "docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR51_STATUS.md",
+      "docs/plans/original-completion-2026-10-02/execution/p04-01/order-audit.json"
+    ],
+    "changed_closure_intersection": [],
+    "scope": "Reuse historical test-local regression results on unchanged executed helper closure and original retained exact S50 raw inputs. These are not fresh S51 negative-control executions. Fresh S51 native admission, current index regeneration and normal registered full verification remain required separately. All original execution labels and failures are retained. Independent reviewer must confirm this applicability.",
+    "commander_decisions": [
+      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ACTUAL_OPUS_REPAIR51_CANONICAL_DECISION.json",
+      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ACTUAL_OPUS_REPAIR51_RUN_DECISION.json"
+    ],
+    "actual_full_controls_rerun": false,
+    "formal_acceptance": false,
+    "at_unix_ns": 1792336814190174000
+  },
+  "full_reuse": {
+    "original_run": "p04-final-full-2cd73406-controller/run",
+    "verified_by_unchanged_current_full_verifier": true,
+    "selected_source_files": 1369,
+    "suites": 184,
+    "parse": 329,
+    "totals": {
+      "actual_all_roster_checks": 21903,
+      "actual_suites": 184,
+      "available_marker_checks": 21903,
+      "missing_marker_paths": [],
+      "remaining_unexecuted_tests": [],
+      "strict_accepted_checks": 21903
+    },
+    "owned_ended": 186,
+    "actual_old_execution_relabelled": false,
+    "independent_review_pending": true
+  },
+  "remaining": [
+    "independent whole-unit Opus review including prior findings and exact applicability",
+    "normal prepare/exact C authorization/integration/final",
+    "Root actual DBjoin/ledger/mainpush"
+  ],
+  "original30": 30,
+  "original88": 88,
+  "formally_completed": 16,
+  "P04_credit": 0,
+  "formal_acceptance": false,
+  "at_unix_ns": 1792337452829350000
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_S51_M_SOURCE_SUBRANGE_CROSSWALK.json

@@ -0,0 +1,204 @@
+{
+  "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+  "S": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "method": "Exact git show M:path, original 1-based lines; no product or docs edits. Supplements the handoff-labelled unverified-M-line subranges; committed main function/handler start anchors are independently checked here.",
+  "verified_anchor_excerpts": [
+    {
+      "behavior": "tick handler registration",
+      "path": "autoload/simulation_runtime.gd",
+      "start": 371,
+      "end": 441,
+      "lines": [
+        "371:\t_clock.unregister_tick_handler(_clock.TickPhase.TIME_BOUNDARIES, &\"simulation_runtime.0_weather\")",
+        "372:\t_clock.register_tick_handler(_clock.TickPhase.TIME_BOUNDARIES, &\"simulation_runtime.0_weather\", Callable(self, \"_advance_weather\"))",
+        "373:\t_clock.unregister_tick_handler(_clock.TickPhase.TIME_BOUNDARIES, &\"simulation_runtime.a_upkeep\")",
+        "374:\t_clock.register_tick_handler(_clock.TickPhase.TIME_BOUNDARIES, &\"simulation_runtime.a_upkeep\", Callable(self, \"_advance_facility_upkeep\"))",
+        "375:\t_clock.register_tick_handler(",
+        "376:\t\t_clock.TickPhase.APPLY_COMMANDS,",
+        "377:\t\t&\"simulation_runtime.commands\",",
+        "378:\t\tCallable(self, \"_process_tick_commands\")",
+        "379:\t)",
+        "380:\t_clock.register_tick_handler(",
+        "381:\t\t_clock.TickPhase.PUBLISH_SNAPSHOT,",
+        "382:\t\t&\"simulation_runtime.snapshot\",",
+        "383:\t\tCallable(self, \"_publish_snapshot\")",
+        "384:\t)",
+        "385:\t_clock.register_tick_handler(",
+        "386:\t\t_clock.TickPhase.MANA,",
+        "387:\t\t&\"simulation_runtime.mana\",",
+        "388:\t\tCallable(self, \"_advance_mana\")",
+        "389:\t)",
+        "390:\t_clock.register_tick_handler(",
+        "391:\t\t_clock.TickPhase.CONSTRUCTION,",
+        "392:\t\t&\"simulation_runtime.construction\",",
+        "393:\t\tCallable(self, \"_advance_construction\")",
+        "394:\t)",
+        "395:\t_clock.register_tick_handler(",
+        "396:\t\t_clock.TickPhase.LOGISTICS,",
+        "397:\t\t&\"simulation_runtime.logistics\",",
+        "398:\t\tCallable(self, \"_advance_inventory_and_logistics\")",
+        "399:\t)",
+        "400:\t_clock.register_tick_handler(",
+        "401:\t\t_clock.TickPhase.FACILITY_COMPLETION,",
+        "402:\t\t&\"simulation_runtime.facilities\",",
+        "403:\t\tCallable(self, \"_advance_facilities\")",
+        "404:\t)",
+        "405:\t_clock.register_tick_handler(",
+        "406:\t\t_clock.TickPhase.VITALS_AND_ENVIRONMENT,",
+        "407:\t\t&\"simulation_runtime.guest_vitals\",",
+        "408:\t\tCallable(self, \"_advance_guest_vitals\")",
+        "409:\t)",
+        "410:\t_clock.register_tick_handler(",
+        "411:\t\t_clock.TickPhase.FACILITY_QUEUES,",
+        "412:\t\t&\"simulation_runtime.guest_queues\",",
+        "413:\t\tCallable(self, \"_advance_guest_queues\")",
+        "414:\t)",
+        "415:\t_clock.register_tick_handler(",
+        "416:\t\t_clock.TickPhase.INCIDENTS_AND_EVENTS,",
+        "417:\t\t&\"simulation_runtime.authority_incidents\",",
+        "418:\t\tCallable(self, \"_advance_authority_incidents\")",
+        "419:\t)",
+        "420:\t_clock.register_tick_handler(",
+        "421:\t\t_clock.TickPhase.INCIDENTS_AND_EVENTS,",
+        "422:\t\t&\"simulation_runtime.defense\",",
+        "423:\t\tCallable(self, \"_advance_defense\")",
+        "424:\t)",
+        "425:\t_clock.register_tick_handler(",
+        "426:\t\t_clock.TickPhase.INCIDENTS_AND_EVENTS,",
+        "427:\t\t&\"simulation_runtime.relationship_events\",",
+        "428:\t\tCallable(self, \"_advance_relationship_events\")",
+        "429:\t)",
+        "430:\t_clock.register_tick_handler(",
+        "431:\t\t_clock.TickPhase.AI_DECISIONS,",
+        "432:\t\t&\"simulation_runtime.staff_ai\",",
+        "433:\t\tCallable(self, \"_advance_staff_ai\")",
+        "434:\t)",
+        "435:\t# The `zz` ID deliberately orders persistence after the published simulation",
+        "436:\t# snapshot at the final phase of a fully completed minute.",
+        "437:\t_clock.register_tick_handler(",
+        "438:\t\t_clock.TickPhase.PUBLISH_SNAPSHOT,",
+        "439:\t\t&\"simulation_runtime.zz_save_checkpoints\",",
+        "440:\t\tCallable(self, \"_process_save_checkpoints\")",
+        "441:\t)"
+      ],
+      "source_SHA256": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0"
+    },
+    {
+      "behavior": "closed queue skips patience",
+      "path": "autoload/simulation_runtime.gd",
+      "start": 8524,
+      "end": 8539,
+      "lines": [
+        "8524:func _advance_guest_queues(absolute_minute: int) -> void:",
+        "8525:\tif _operations_tick_blocked:",
+        "8526:\t\treturn",
+        "8527:\t_release_closed_business_queues(absolute_minute)",
+        "8528:\tvar guests_by_request: Dictionary = {}",
+        "8529:\tfor guest: GuestRuntime in guest_service.get_guests():",
+        "8530:\t\tif guest.state != GuestRuntime.State.QUEUING:",
+        "8531:\t\t\tcontinue",
+        "8532:\t\tif not guests_by_request.has(guest.queue_request_id):",
+        "8533:\t\t\tguests_by_request[guest.queue_request_id] = []",
+        "8534:\t\t(guests_by_request[guest.queue_request_id] as Array).append(guest)",
+        "8535:\tfor request_id: StringName in _sorted_name_keys(guests_by_request):",
+        "8536:\t\tvar grouped_guests: Array = guests_by_request[request_id]",
+        "8537:\t\tvar queued_facility := facility_service.get_instance(grouped_guests[0].target_facility_id)",
+        "8538:\t\tif queued_facility != null and (not queued_facility.operator_open or not queued_facility.is_within_opening_hours(absolute_minute)):",
+        "8539:\t\t\tcontinue # A deferred closure must not spend patience while retrying."
+      ],
+      "source_SHA256": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0"
+    },
+    {
+      "behavior": "planned exit only DECIDING then later despawn",
+      "path": "autoload/simulation_runtime.gd",
+      "start": 8760,
+      "end": 8784,
+      "lines": [
+        "8760:func _advance_guest_ai_decisions(absolute_minute: int) -> void:",
+        "8761:\tfor guest: GuestRuntime in guest_service.get_guests():",
+        "8762:\t\tmatch guest.state:",
+        "8763:\t\t\tGuestRuntime.State.SPAWNING:",
+        "8764:\t\t\t\tguest_service.transition_guest(guest.guest_id, GuestRuntime.State.ENTERING, absolute_minute, &\"ENTRY_STARTED\")",
+        "8765:\t\t\tGuestRuntime.State.ENTERING:",
+        "8766:\t\t\t\tguest_service.transition_guest(guest.guest_id, GuestRuntime.State.DECIDING, absolute_minute, &\"ENTRY_COMPLETED\")",
+        "8767:\t\t\tGuestRuntime.State.DECIDING:",
+        "8768:\t\t\t\tif guest.planned_exit_at <= absolute_minute:",
+        "8769:\t\t\t\t\tguest_service.begin_leaving(guest.guest_id, absolute_minute, &\"PLANNED_EXIT\")",
+        "8770:\t\t\t\t\tcontinue",
+        "8771:\t\t\t\tguest.wallet_gold = economy_service.get_balance(_guest_wallet_account(guest.guest_id))",
+        "8772:\t\t\t\t_decide_guest_with_log(",
+        "8773:\t\t\t\t\tguest.guest_id,",
+        "8774:\t\t\t\t\t_project_guest_candidates(guest.guest_id),",
+        "8775:\t\t\t\t\tabsolute_minute,",
+        "8776:\t\t\t\t\t{&\"absolute_minute\": absolute_minute}",
+        "8777:\t\t\t\t)",
+        "8778:\t\t\tGuestRuntime.State.MOVING:",
+        "8779:\t\t\t\tpass",
+        "8780:\t\t\tGuestRuntime.State.REPLANNING, GuestRuntime.State.ABANDONING, GuestRuntime.State.INTERRUPTED:",
+        "8781:\t\t\t\tguest_service.transition_guest(guest.guest_id, GuestRuntime.State.DECIDING, absolute_minute, &\"REPLAN_AFTER_INTERRUPTION\")",
+        "8782:\t\t\tGuestRuntime.State.LEAVING:",
+        "8783:\t\t\t\tif guest.state_entered_at < absolute_minute:",
+        "8784:\t\t\t\t\tguest_service.despawn_guest(guest.guest_id, absolute_minute)"
+      ],
+      "source_SHA256": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0"
+    },
+    {
+      "behavior": "service transaction forwards current absolute minute",
+      "path": "autoload/simulation_runtime.gd",
+      "start": 11817,
+      "end": 11838,
+      "lines": [
+        "11817:func _complete_service_transaction(",
+        "11818:\tservice: ServiceInstance,",
+        "11819:\trequest: ServiceRequest,",
+        "11820:\tfacility: FacilityInstance,",
+        "11821:\tabsolute_minute: int",
+        "11822:) -> Variant:",
+        "11823:\t# A sale is only observable after its inventory, rewards and cleanliness",
+        "11824:\t# effects commit. Rollback removes provisional receipts before scope exit.",
+        "11825:\teconomy_service.begin_notification_scope()",
+        "11826:\tvar result: Variant = _apply_service_transaction(service, request, facility, absolute_minute)",
+        "11827:\tif result is bool and result:",
+        "11828:\t\t_state.set_resource(&\"gold\", economy_service.get_balance(PLAYER_CASH_ACCOUNT))",
+        "11829:\teconomy_service.end_notification_scope()",
+        "11830:\treturn result",
+        "11831:",
+        "11832:",
+        "11833:func _apply_service_transaction(",
+        "11834:\tservice: ServiceInstance,",
+        "11835:\trequest: ServiceRequest,",
+        "11836:\tfacility: FacilityInstance,",
+        "11837:\tabsolute_minute: int",
+        "11838:) -> Variant:"
+      ],
+      "source_SHA256": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0"
+    },
+    {
+      "behavior": "actual service charge event anchor",
+      "path": "autoload/simulation_runtime.gd",
+      "start": 11877,
+      "end": 11877,
+      "lines": [
+        "11877:\t\t\t\tservice.price_snapshot, &\"SERVICE_SALE\", facility.instance_id"
+      ],
+      "source_SHA256": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0"
+    },
+    {
+      "behavior": "actual service charge event anchor",
+      "path": "autoload/simulation_runtime.gd",
+      "start": 11881,
+      "end": 11881,
+      "lines": [
+        "11881:\t\t\t\tservice.price_snapshot, &\"SERVICE_CASH_SWEEP\", facility.instance_id"
+      ],
+      "source_SHA256": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0"
+    }
+  ],
+  "provisional_handoff_ranges_not_asserted_current": [
+    "8516-8517 for closed queue (actual8538-8539)",
+    "8760-8762 for later despawn (actual8782-8784)",
+    "11826-11838 for charge event (function invocation/signature only; actual event lines included separately)"
+  ],
+  "formal_acceptance": false,
+  "at_unix_ns": 1792336923646879000
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_S51_POST_REVIEW_EXIT_SOURCE_EXCERPT.json

@@ -0,0 +1,12 @@
+{
+  "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+  "path": "autoload/simulation_runtime.gd",
+  "source_sha256": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0",
+  "function": "_execute_leave_facility_queue",
+  "start": 7575,
+  "end": 7628,
+  "exact_numbered_source": "7575:func _execute_leave_facility_queue(command: SimulationCommand) -> CommandResult:\n7576:\tvar facility_id := StringName(command.payload.get(&\"facility_id\", command.payload.get(\"facility_id\", \"\")))\n7577:\tvar request_id := StringName(command.payload.get(&\"request_id\", command.payload.get(\"request_id\", \"\")))\n7578:\tvar request := facility_service.get_request(request_id)\n7579:\tif request == null:\n7580:\t\treturn CommandResult.failed(CommandResult.Code.NOT_FOUND, command.command_id, \"Queued service request was not found.\")\n7581:\tvar inventory_before := inventory_service.create_snapshot()\n7582:\tvar facility_before := facility_service.create_snapshot()\n7583:\tvar guest_before := guest_service.create_snapshot()\n7584:\tvar events_before := domain_events.create_snapshot()\n7585:\tvar id_before := id_generator.create_snapshot()\n7586:\tvar external_leave := func(_guest_id: StringName = &\"\", _facility_id: StringName = &\"\", _request_id: StringName = &\"\") -> Dictionary:\n7587:\t\tfor reservation_id: StringName in request.reserved_inventory_ids:\n7588:\t\t\tvar released := inventory_service.release_reservation(\n7589:\t\t\t\treservation_id,\n7590:\t\t\t\tStringName(\"service.release.%s.%s\" % [request_id, reservation_id]),\n7591:\t\t\t\t_runtime_event_minute()\n7592:\t\t\t)\n7593:\t\t\tif not bool(released.get(&\"ok\", false)):\n7594:\t\t\t\treturn released\n7595:\t\tvar leave_result := facility_service.leave_queue(facility_id, request_id)\n7596:\t\treturn {&\"ok\": leave_result.is_success(), &\"message\": leave_result.message}\n7597:\tvar runtime_guests: Array[StringName] = []\n7598:\tfor guest_id: StringName in request.guest_ids:\n7599:\t\tif guest_service.has_guest(guest_id):\n7600:\t\t\truntime_guests.append(guest_id)\n7601:\tvar successful := true\n7602:\tvar failure_message := \"Facility queue removal failed.\"\n7603:\tif runtime_guests.is_empty():\n7604:\t\tvar external_result: Dictionary = external_leave.call()\n7605:\t\tsuccessful = bool(external_result.get(&\"ok\", false))\n7606:\t\tfailure_message = String(external_result.get(&\"message\", failure_message))\n7607:\telse:\n7608:\t\tfor guest_index in range(runtime_guests.size()):\n7609:\t\t\tvar queued_guest := guest_service.get_guest(runtime_guests[guest_index])\n7610:\t\t\tvar abandon := guest_service.tick_queue_patience(\n7611:\t\t\t\tqueued_guest.guest_id,\n7612:\t\t\t\t_runtime_event_minute(),\n7613:\t\t\t\t-queued_guest.patience_remaining,\n7614:\t\t\t\texternal_leave if guest_index == 0 else Callable()\n7615:\t\t\t)\n7616:\t\t\tif not bool(abandon.get(&\"ok\", false)):\n7617:\t\t\t\tsuccessful = false\n7618:\t\t\t\tfailure_message = String(abandon.get(&\"message\", failure_message))\n7619:\t\t\t\tbreak\n7620:\tif not successful:\n7621:\t\tinventory_service.restore_snapshot(inventory_before)\n7622:\t\tfacility_service.restore_snapshot(facility_before)\n7623:\t\tguest_service.restore_snapshot(guest_before)\n7624:\t\tdomain_events.restore_snapshot(events_before)\n7625:\t\tid_generator.restore_snapshot(id_before)\n7626:\t\treturn CommandResult.failed(CommandResult.Code.TRANSACTION_APPLY_FAILED, command.command_id, failure_message)\n7627:\treturn CommandResult.succeeded(command.command_id, {&\"request_id\": request_id, &\"reason\": &\"GUEST_LEFT\"})\n7628:",
+  "scope": "Post-review exact source excerpt for low-priority provisional release-key line range. No source or prior review evidence edited. Full function shows actual release calls and idempotency checks.",
+  "formal_acceptance": false,
+  "at_unix_ns": 1792338416275735000
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_S51_PROOF_READ_SCOPE_CONTROLS.json

@@ -0,0 +1,83 @@
+{
+  "passed": true,
+  "wrapper_sha256": "83532b4fcd4f7308a936dfe0951fc6bc43de60f38cb528e9bbcb43d6225bcc01",
+  "base_seatbelt_source_sha256": "877f868faf2958a40fe412aa11724c2ea035c77422acc5cc053879e6ab7051e8",
+  "exact_roots": [
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500",
+      "HEAD": "1313ff5d3b13cf912b327b178c3e9c91bf9f73df",
+      "tree": "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+      "source_manifest": {
+        "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s5-DIAG-r51/source_before.json",
+        "sha256": "109a1772b2a6b738f03025311b3cdc059a4e590e08956c6466177a9841eb4056"
+      },
+      "selected_files": 1369,
+      "selected_source_map_sha256": "0a22b15ce0327e6da1904633f3331a5d9784d4122823d77cec21b33f464adcb9"
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406",
+      "HEAD": "9bb8e09506bb143991a62a7f2cea024753cd5cfe",
+      "tree": "66a9587a99fc97ef281237fdc0f9d67e014b7444",
+      "source_manifest": {
+        "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-final-full-2cd73406-controller/run/source-start.json",
+        "sha256": "f3bedbcad504c42904017dd64029d5e008372ea6bcfd93e6f88c34fa24b963bf"
+      },
+      "selected_files": 1369,
+      "selected_source_map_sha256": "0a22b15ce0327e6da1904633f3331a5d9784d4122823d77cec21b33f464adcb9"
+    }
+  ],
+  "controls": [
+    "inactive profile byte-identical",
+    "commander profile byte-identical",
+    "reviewer profile byte-identical",
+    "implementer profile byte-identical",
+    "other task not eligible",
+    "stale HEAD rejected",
+    "original profile line retained 8cf252c1a100",
+    "original profile line retained f69a413145d9",
+    "original profile line retained 55c8fe3f70a5",
+    "original profile line retained 7cb510d5e7d0",
+    "original profile line retained e4f930126fa9",
+    "original profile line retained 06cf75eb9a24",
+    "original profile line retained 962d3ed4dbdc",
+    "original profile line retained 916736e2df5e",
+    "original profile line retained 76ac13af986b",
+    "original profile line retained 0f73c8ca4953",
+    "original profile line retained 782022319b86",
+    "original profile line retained 2340781acaaa",
+    "original profile line retained 3c5328d4d85a",
+    "exact Qt read P04-01-root-q-r51-78581500",
+    "exact Qt read P04-01-root-q-r47-2cd73406",
+    "both Qt writes denied",
+    "sibling auth and state reads denied"
+  ],
+  "actual_sandbox_results": {
+    "reads": [
+      {
+        "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500/AGENTS.md",
+        "bytes": 605,
+        "sha256": "8d8dc40211390275f858f322743309a0663c4f2d859780a8b8a08cea1450e8b3"
+      },
+      {
+        "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406/AGENTS.md",
+        "bytes": 605,
+        "sha256": "8d8dc40211390275f858f322743309a0663c4f2d859780a8b8a08cea1450e8b3"
+      }
+    ],
+    "denied_writes": [
+      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500/AGENTS.md",
+      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406/AGENTS.md"
+    ],
+    "denied_reads": [
+      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/READ_SCOPE_SIBLING_NEGATIVE_SENTINEL.txt",
+      "/Users/korizatou114/.codex/auth.json",
+      "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/config.json"
+    ]
+  },
+  "profile_sha256": "92c8637a7244fa84091de0c8890100879772aae523f75683832c8fc679fe2e3f",
+  "provider_calls": 0,
+  "engines": 0,
+  "full_checker_invocations": 0,
+  "source_or_evidence_changed": false,
+  "at_unix_ns": 1792337283264809000
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_S51_RAW_CROSS_VERSION_SCOPE.json

@@ -0,0 +1,58 @@
+{
+  "historical_S": "a9ef681fb8f3356507d3d6e58ae30a339deb8a6c",
+  "current_S": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "literal_equal_files": 1458,
+  "different_descriptor_files": [
+    "reader-S5A_PURE-case.json",
+    "reader-S5A_PURE-case.var",
+    "reader-S5B_DEPENDENCY-case.json",
+    "reader-S5B_DEPENDENCY-case.var",
+    "reader-S5C_DESTRUCTION_COMMAND-case.json",
+    "reader-S5C_DESTRUCTION_COMMAND-case.var",
+    "reader-S5D_DESTRUCTION_RAID-case.json",
+    "reader-S5D_DESTRUCTION_RAID-case.var",
+    "reader-S5D_IN_FLIGHT-case.json",
+    "reader-S5D_IN_FLIGHT-case.var",
+    "reader-S5D_PAID_BEFORE_INCIDENT-case.json",
+    "reader-S5D_PAID_BEFORE_INCIDENT-case.var",
+    "reader-S5E_MIDNIGHT-case.json",
+    "reader-S5E_MIDNIGHT-case.var",
+    "reader-S5F_EXIT-case.json",
+    "reader-S5F_EXIT-case.var",
+    "reader-S5G_SHIFT_1080-case.json",
+    "reader-S5G_SHIFT_1080-case.var",
+    "reader-S5H_PAUSED_MIDNIGHT-case.json",
+    "reader-S5H_PAUSED_MIDNIGHT-case.var",
+    "reader.json",
+    "reader.var",
+    "writer-S5A_PURE-case.json",
+    "writer-S5A_PURE-case.var",
+    "writer-S5B_DEPENDENCY-case.json",
+    "writer-S5B_DEPENDENCY-case.var",
+    "writer-S5C_DESTRUCTION_COMMAND-case.json",
+    "writer-S5C_DESTRUCTION_COMMAND-case.var",
+    "writer-S5D_DESTRUCTION_RAID-case.json",
+    "writer-S5D_DESTRUCTION_RAID-case.var",
+    "writer-S5D_IN_FLIGHT-case.json",
+    "writer-S5D_IN_FLIGHT-case.var",
+    "writer-S5D_PAID_BEFORE_INCIDENT-case.json",
+    "writer-S5D_PAID_BEFORE_INCIDENT-case.var",
+    "writer-S5E_MIDNIGHT-case.json",
+    "writer-S5E_MIDNIGHT-case.var",
+    "writer-S5F_EXIT-case.json",
+    "writer-S5F_EXIT-case.var",
+    "writer-S5G_SHIFT_1080-case.json",
+    "writer-S5G_SHIFT_1080-case.var",
+    "writer-S5H_PAUSED_MIDNIGHT-case.json",
+    "writer-S5H_PAUSED_MIDNIGHT-case.var",
+    "writer.json",
+    "writer.var"
+  ],
+  "keysets_equal": true,
+  "guards_G1_G2_literal_equal": true,
+  "whole_raw_equality": false,
+  "attempted_owned_path_only_equivalence": "REJECTED: first reader case also contains distinct captured formal-profile provenance and saved-member pins; no normalization or waiver applied. New raw is verified normally, not substituted for old input.",
+  "scope": "Historical order/identity regression reuse concerns unchanged executed helpers with retained exact S50 inputs, not an assertion that all S51 raw bytes equal S50. Current native/collector/registered verification remains separate.",
+  "formal_acceptance": false,
+  "at_unix_ns": 1792337270720117000
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_S51_RETAINED_TEST_LOCAL_CONTROLS_APPLICABILITY.json

@@ -0,0 +1,37 @@
+{
+  "current_submission": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "historical_control_submission": "a9ef681fb8f3356507d3d6e58ae30a339deb8a6c",
+  "historical_order_execution": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q50_ORIGINAL_ORDER_TYPED_EXECUTION.json",
+  "historical_order_execution_pin": {
+    "bytes": 275993,
+    "sha256": "15b91f1ccc6c6f7d09709055049f157ee0bb6730c0b1c258ee4b9d921b0d60cd"
+  },
+  "historical_order_result_pin": {
+    "bytes": 9126478,
+    "sha256": "9b508092e77f241de593b71c1711dd5e3203b0a8d0e9717abfa20488beb2a3e0"
+  },
+  "historical_identity_result": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S50_COMPLETE_CURRENT_B_IDENTITY.log",
+  "historical_identity_pin": {
+    "bytes": 36990,
+    "sha256": "f05bf544c15b91d997f89ae01965f4acea464f80b42cbf076144971485eddab2"
+  },
+  "unchanged_full_execution_closure_files": 49,
+  "three_snapshot_closures_identical_and_retained": true,
+  "actual_original_raw_files_rehashed_unchanged": 1502,
+  "changed_paths": [
+    "docs/plans/original-completion-2026-10-02/execution/p04-01/CURRENT_STATUS.md",
+    "docs/plans/original-completion-2026-10-02/execution/p04-01/ORDER_AUDIT.md",
+    "docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR51_APPLICABILITY_MAP.json",
+    "docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR51_STATUS.md",
+    "docs/plans/original-completion-2026-10-02/execution/p04-01/order-audit.json"
+  ],
+  "changed_closure_intersection": [],
+  "scope": "Reuse historical test-local regression results on unchanged executed helper closure and original retained exact S50 raw inputs. These are not fresh S51 negative-control executions. Fresh S51 native admission, current index regeneration and normal registered full verification remain required separately. All original execution labels and failures are retained. Independent reviewer must confirm this applicability.",
+  "commander_decisions": [
+    "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ACTUAL_OPUS_REPAIR51_CANONICAL_DECISION.json",
+    "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ACTUAL_OPUS_REPAIR51_RUN_DECISION.json"
+  ],
+  "actual_full_controls_rerun": false,
+  "formal_acceptance": false,
+  "at_unix_ns": 1792336814190174000
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ROOT_S51_STANDING_OWNER_AUTHORIZATION_APPLICATION.json

@@ -0,0 +1,13 @@
+{
+  "candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+  "main_base": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+  "submission": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "authority": "Existing human user directions in this same chat, applied to the reviewed and validated P04-01 candidate within their stated scope",
+  "verbatim_user_directions": [
+    "コミットすべき内容をコミットして。その上でpushして",
+    "mainの更新を明示的に許可します"
+  ],
+  "new_candidate_specific_human_statement_claimed": false,
+  "coordinator_judgment": "Standing main-update and commit/push authorization applies; no new product/spec/value/publication/permission change",
+  "at_unix_ns": 1792338601290990000
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/accepted-condition-matrix.json

@@ -0,0 +1,359 @@
+{
+  "original_unit": "P04-01",
+  "original_packages": 30,
+  "original_total": 88,
+  "formal_completed": 17,
+  "formal_credit": 1,
+  "checker_sha256": "3bb0cde776bc295f6f18e74f1e23bf3d832d8e4f71aed260601c82d287c655fd",
+  "required_conditions": {
+    "power_stop": {
+      "exact_checker_contract": [
+        "停電",
+        [
+          "BASELINE:183",
+          "D05-P04-PAUSE-REASON"
+        ],
+        {
+          "charges": 0
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "destruction_stop": {
+      "exact_checker_contract": [
+        "破壊",
+        [
+          "D05-P04-DESTRUCTION"
+        ],
+        {
+          "charges": 0
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "dependency_stop": {
+      "exact_checker_contract": [
+        "閉店",
+        [
+          "D05-P04-DEPENDENCY"
+        ],
+        {
+          "charges": 0,
+          "progress_delta": 0,
+          "reservation_ids_preserved": true,
+          "service_id_preserved": true
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "shift_completion": {
+      "exact_checker_contract": [
+        "シフト交代",
+        [
+          "BASELINE:64",
+          "BASELINE:67",
+          "D05-P04-SHIFT-1800"
+        ],
+        {
+          "minute": 1080,
+          "completions": 1,
+          "charges": 1,
+          "completion_before_shift": true
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "recovery_completion": {
+      "exact_checker_contract": [
+        "課金",
+        [
+          "D05-P04-DEPENDENCY"
+        ],
+        {
+          "completions": 1,
+          "charges": 1
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "same_minute_replay": {
+      "exact_checker_contract": [
+        "課金",
+        [
+          "D05-P04-DEPENDENCY",
+          "D05-P04-SHIFT-1800"
+        ],
+        {
+          "completions": 1,
+          "charges": 1,
+          "duplicate_generations": 0,
+          "same_minute_replayed": true
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "closure_release": {
+      "exact_checker_contract": [
+        "閉店",
+        [
+          "D-034"
+        ],
+        {
+          "orphan_reservations": 0,
+          "released_once": true,
+          "started_service_continues": true
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "exit_release": {
+      "exact_checker_contract": [
+        "退出",
+        [
+          "D-034",
+          "D05-P04-EXIT"
+        ],
+        {
+          "orphan_reservations": 0,
+          "released_once": true
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "patience_release": {
+      "exact_checker_contract": [
+        "退出",
+        [
+          "D-034",
+          "D05-P04-EXIT"
+        ],
+        {
+          "orphan_reservations": 0,
+          "released_once": true
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "paused_midnight": {
+      "exact_checker_contract": [
+        "00:00決算",
+        [
+          "D05-P04-DEPENDENCY",
+          "BASELINE:71",
+          "BASELINE:72",
+          "D05-P04-MIDNIGHT-DAY"
+        ],
+        {
+          "orphan_reservations": 0,
+          "crossed_midnight_while_paused": true,
+          "stopped_charges": 0,
+          "completions": 1,
+          "charges": 1
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "midnight_settlement": {
+      "exact_checker_contract": [
+        "00:00決算",
+        [
+          "BASELINE:71",
+          "BASELINE:72",
+          "A01",
+          "D05-P04-MIDNIGHT-DAY"
+        ],
+        {
+          "settlements": 1,
+          "sales_payments": 1,
+          "payroll_payments": 1,
+          "upkeep_payments": 1,
+          "duty_payments": 1,
+          "nonzero_payroll": true
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "midnight_replay": {
+      "exact_checker_contract": [
+        "00:00決算",
+        [
+          "BASELINE:71",
+          "BASELINE:72",
+          "A01"
+        ],
+        {
+          "settlements": 1,
+          "same_minute_replayed": true,
+          "duplicate_payments": 0
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "save_restore": {
+      "exact_checker_contract": [
+        "00:00決算",
+        [
+          "BASELINE:71",
+          "BASELINE:72",
+          "A01"
+        ],
+        {
+          "settlements": 1,
+          "duplicate_payments": 0,
+          "formal_save_restored": true
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "night_staff_absent": {
+      "exact_checker_contract": [
+        "シフト交代",
+        [
+          "BASELINE:67",
+          "D05-P04-SHIFT-1800"
+        ],
+        {
+          "minute": 1081,
+          "state": "WAITING_FOR_STAFF",
+          "night_staff_count": 0
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    },
+    "overtime_task": {
+      "exact_checker_contract": [
+        "シフト交代",
+        [
+          "BASELINE:67"
+        ],
+        {
+          "interrupt_level": 0,
+          "is_overtime": true,
+          "duty_recorded_once": true
+        }
+      ],
+      "accepted": true,
+      "proof": "accepted-index.json plus actual validation/review/integration/final receipts and Root real DB join",
+      "local_raw_verified": true,
+      "missing": [],
+      "accepted_candidate": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"
+    }
+  },
+  "EV_additional_required_proof": [
+    [
+      "autoload/simulation_runtime.gd",
+      "_execute_create_staff_task",
+      "8b83aff45ead128b70931343271dbd03a1024b90238d1f46f93e4856290aa0d8",
+      10
+    ],
+    [
+      "scripts/staff/task_dispatcher.gd",
+      "_reserve_pair",
+      "48e2e593c117bd675236a165a294c9cc6233f87018010249cd8e675aff01fc3c",
+      6
+    ],
+    [
+      "autoload/simulation_runtime.gd",
+      "_reserve_staff_task_items",
+      "4f2add093de47cb08abfa45e9d2285f00d906c9bceadb2d98ffa42faae9ede67",
+      28
+    ],
+    [
+      "autoload/simulation_runtime.gd",
+      "_advance_staff_task_travel",
+      "53937aefeec533a5f16169bba4dd6a69b5246101d09de77ca95db7ca174c63ce",
+      2
+    ],
+    [
+      "scripts/transport/elevator_service.gd",
+      "set_powered",
+      "925f4bf2d109421956fb2958981758d7d84a1ca586a9d4eb51572b8b9677cfba",
+      6
+    ]
+  ],
+  "all_seven_domains_required": [
+    "closure",
+    "power",
+    "destruction",
+    "exit",
+    "charge",
+    "shift",
+    "midnight"
+  ],
+  "all_six_D05_approved": true,
+  "S": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+  "diagnostic_Qt": "2e41a616c65d3ac132c85574593ae7efaf4f9848",
+  "diagnostic_checkout": "1313ff5d3b13cf912b327b178c3e9c91bf9f73df",
+  "normal_C": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+  "EV_raw_verified": true,
+  "current_native_S5": {
+    "all_four_phases_passed": true,
+    "engines_ended": 4,
+    "receipt": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s5-DIAG-r51/runner-ended.json"
+  },
+  "historical_S47_matrix": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/P04_REQUIRED_CONDITION_MATRIX_2CD73406.json",
+  "approved_D05_extra_subclause": "All actual S51 gates mechanically verified; sequential-onset PAUSE-REASON interpretation remains explicitly unproven, not silently narrowed or cured.",
+  "whole_unit_required_gates": [],
+  "at_unix_ns": 1792337452832483000,
+  "current_registered_handoff_gap": null,
+  "formal_acceptance": true,
+  "accepted_at_jst": "2026-10-19T00:54:23.322453+09:00",
+  "whole_goal_accepted": false
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/final/command.json

@@ -0,0 +1,31 @@
+{
+  "argv": [
+    "/opt/homebrew/Cellar/python@3.12/3.12.13_2/Frameworks/Python.framework/Versions/3.12/bin/python3.12",
+    "-B",
+    "tools/check_p04_order_evidence.py",
+    "--verify-only"
+  ],
+  "cwd": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-final-98a6e450",
+  "env_names": [
+    "AGY_CLI_DISABLE_AUTO_UPDATE",
+    "BROWSER_PROFILE_DIR",
+    "BUILD_OUTPUT_DIR",
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC",
+    "GIT_TERMINAL_PROMPT",
+    "HOME",
+    "LANG",
+    "LC_ALL",
+    "LOGNAME",
+    "MAC_CHROMIUM_TMPDIR",
+    "PATH",
+    "PORT",
+    "PYTHONDONTWRITEBYTECODE",
+    "TEMP",
+    "TERM",
+    "TEST_DATABASE_PATH",
+    "TMP",
+    "TMPDIR",
+    "USER"
+  ],
+  "execution": "sandbox"
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/final/receipt.json

@@ -0,0 +1,14 @@
+{
+  "task_id": "P04-01",
+  "commit": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+  "kind": "final",
+  "checks": [
+    {
+      "id": "p04-acceptance",
+      "exit_code": 0,
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7c7cf5e5b35944a2bec0d54564ac94eb",
+      "passed": true
+    }
+  ],
+  "passed": true
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/final/sandbox.sb

@@ -0,0 +1,14 @@
+(version 1)
+(allow default)
+(deny file-write*)
+(deny file-read-data (require-all (subpath "/Users/korizatou114") (require-not (literal "/Users/korizatou114")) (require-not (literal "/Users/korizatou114/.local")) (require-not (literal "/Users/korizatou114/.local/share")) (require-not (literal "/Users/korizatou114/Projects")) (require-not (literal "/Users/korizatou114/Projects/TheTree-managed-worktrees")) (require-not (literal "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01")) (require-not (literal "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime")) (require-not (subpath "/Users/korizatou114/.local/bin")) (require-not (subpath "/Users/korizatou114/.local/share/claude")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-final-98a6e450")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500")) (require-not (subpath "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/.git"))))
+(allow file-write* (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01"))
+(allow file-write* (literal "/dev/null") (literal "/dev/tty") (literal "/dev/stdout") (literal "/dev/stderr"))
+(deny file-read* file-write* (subpath "/private/tmp/the-tree-p24-02-control-r02"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/Library/Application Support/agent-control"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.ssh"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.aws"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.azure"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.config/gcloud"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/Library/Keychains"))
+(deny file-write* (subpath "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/.git"))

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/final/stdout.log

@@ -0,0 +1 @@
+{"task_id": "P04-01", "machine_verified": true, "formal_acceptance": false, "role": "integration/final", "actual_head": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/integration/command.json

@@ -0,0 +1,31 @@
+{
+  "argv": [
+    "/opt/homebrew/Cellar/python@3.12/3.12.13_2/Frameworks/Python.framework/Versions/3.12/bin/python3.12",
+    "-B",
+    "tools/check_p04_order_evidence.py",
+    "--verify-only"
+  ],
+  "cwd": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-integration-1a7627fa",
+  "env_names": [
+    "AGY_CLI_DISABLE_AUTO_UPDATE",
+    "BROWSER_PROFILE_DIR",
+    "BUILD_OUTPUT_DIR",
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC",
+    "GIT_TERMINAL_PROMPT",
+    "HOME",
+    "LANG",
+    "LC_ALL",
+    "LOGNAME",
+    "MAC_CHROMIUM_TMPDIR",
+    "PATH",
+    "PORT",
+    "PYTHONDONTWRITEBYTECODE",
+    "TEMP",
+    "TERM",
+    "TEST_DATABASE_PATH",
+    "TMP",
+    "TMPDIR",
+    "USER"
+  ],
+  "execution": "sandbox"
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/integration/receipt.json

@@ -0,0 +1,14 @@
+{
+  "task_id": "P04-01",
+  "commit": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4",
+  "kind": "integration",
+  "checks": [
+    {
+      "id": "p04-acceptance",
+      "exit_code": 0,
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/927c4dd5e24345bc876cd2b69482b37e",
+      "passed": true
+    }
+  ],
+  "passed": true
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/integration/sandbox.sb

@@ -0,0 +1,14 @@
+(version 1)
+(allow default)
+(deny file-write*)
+(deny file-read-data (require-all (subpath "/Users/korizatou114") (require-not (literal "/Users/korizatou114")) (require-not (literal "/Users/korizatou114/.local")) (require-not (literal "/Users/korizatou114/.local/share")) (require-not (literal "/Users/korizatou114/Projects")) (require-not (literal "/Users/korizatou114/Projects/TheTree-managed-worktrees")) (require-not (literal "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01")) (require-not (literal "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime")) (require-not (subpath "/Users/korizatou114/.local/bin")) (require-not (subpath "/Users/korizatou114/.local/share/claude")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-integration-1a7627fa")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500")) (require-not (subpath "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/.git"))))
+(allow file-write* (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01"))
+(allow file-write* (literal "/dev/null") (literal "/dev/tty") (literal "/dev/stdout") (literal "/dev/stderr"))
+(deny file-read* file-write* (subpath "/private/tmp/the-tree-p24-02-control-r02"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/Library/Application Support/agent-control"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.ssh"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.aws"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.azure"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.config/gcloud"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/Library/Keychains"))
+(deny file-write* (subpath "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/.git"))

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/integration/stdout.log

@@ -0,0 +1 @@
+{"task_id": "P04-01", "machine_verified": true, "formal_acceptance": false, "role": "integration/final", "actual_head": "b1810ff4b2809018fe7434be7bdcf6f6411c91f4"}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/remaining-low-priority-findings.json

@@ -0,0 +1,20 @@
+{
+  "from_actual_review": [
+    {
+      "severity": "low",
+      "message": "order-audit.json の正本の表（phase_order と safety_cases）に、誤っていると分かっている部分範囲の行番号が残っています。\n- 3件は Root の SOURCE_SUBRANGE_CROSSWALK が訂正しています：閉店キューの 8516–8517（実際は 8538–8539）、後の despawn の 8760–8762（実際は 8782–8784）、課金イベントの 11826–11838（実際は 11877/11881）。\n- safety_cases の『release keys:7565–7569』は訂正されていません。この範囲は _execute_leave_facility_queue の開始行 7575 より前なので、明らかに誤りです。\n- どれも『unverified-M-line』と表示されていて、主要な関数アンカーは正しいので、受入の判断は変わりません。\n- 修正案：後続の文書修正で、訂正済みの行番号に揃えるか、部分範囲を削除する。"
+    },
+    {
+      "severity": "low",
+      "message": "D05-P04-PAUSE-REASON は、同じ tick に両方の条件が起きる場合（S5B）しか実行して証明していません。\n- 停電が先に起き、その後に依存先が休業した場合、facility_service.gd 860-871行の動作では理由が NO_POWER のまま残ります。\n- 承認の回答『現行動作を確定する』とは整合するとも読めます。一方、方針文『同時なら休業優先』の範囲に入るかは解釈が残ります。\n- 文書は未解決・未証明として正直に記録しています。安全性（569行の ACTIVE 判定）には影響せず、P04-01 の受入を左右しません。\n- 表示規則として確定させるなら、所有者が承認する別タスクで扱う必要があります。"
+    },
+    {
+      "severity": "low",
+      "message": "order-audit.json と CURRENT_STATUS.md の冒頭は、提出前時点の『S51 admission pending AT HANDOFF』のままで、index.json にもそのまま取り込まれています。\n- 提出後に S51 の native6 と validation が合格した事実は、Root の受領記録（p04-root-acceptance-78581500）にしかありません。\n- 正本節は受領記録の場所を示しているので、矛盾ではありません。ただし読み手は二つの資料を突き合わせる必要があります。\n- 統合時か次の文書更新で、S51 の受領記録への一行参照を追記することを推奨します。"
+    }
+  ],
+  "handling": "Retained follow-ups; independent whole-unit reviewer explicitly found none blocks original P04-01 acceptance. No unknown sequential-onset policy is silently adopted. Provisional subrange source excerpts are supplied; canonical wording cleanup deferred to a related documentation batch.",
+  "whole_goal_complete": false,
+  "sequential_reason_policy_scope": "unresolved/unproven; current behavior retained",
+  "acceptance_not_relaxed": true
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/review-root-material-manifest.json

@@ -0,0 +1,218 @@
+{
+  "S": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "files": [
+    {
+      "path": "ROOT_S51_CURRENT_BEFORE_WHOLE_REVIEW.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_CURRENT_BEFORE_WHOLE_REVIEW.json",
+      "bytes": 4499,
+      "sha256": "8a4b254f38c5c4f47df2e8cfb054c22f50e08cb30ebff9648fe5d8686da780cc"
+    },
+    {
+      "path": "P04_REQUIRED_CONDITION_MATRIX_78581500_PRE_REVIEW.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/P04_REQUIRED_CONDITION_MATRIX_78581500_PRE_REVIEW.json",
+      "bytes": 12364,
+      "sha256": "9ae6b75cd3598d8db530be3edd78c5e8ee93dc1f07362f98a2a6bb961b624c17"
+    },
+    {
+      "path": "ROOT_S51_ACTUAL_APPLICABILITY_INITIAL.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_ACTUAL_APPLICABILITY_INITIAL.json",
+      "bytes": 706,
+      "sha256": "2943c5c73f836377f760793611d1824a67fc06164270ec5a0338c315cef8f3a2"
+    },
+    {
+      "path": "ROOT_S51_RETAINED_TEST_LOCAL_CONTROLS_APPLICABILITY.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_RETAINED_TEST_LOCAL_CONTROLS_APPLICABILITY.json",
+      "bytes": 2503,
+      "sha256": "aefd362094cb5b49fd12a52b5db0ef8a6338e099308ea5f1f04eab8f13db0f1f"
+    },
+    {
+      "path": "ROOT_S51_RAW_CROSS_VERSION_SCOPE.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_RAW_CROSS_VERSION_SCOPE.json",
+      "bytes": 2523,
+      "sha256": "20fe4bfba87fc4591658e0aec03a519c7bc81fe98ce1a6ef1200f470eb953b85"
+    },
+    {
+      "path": "ROOT_S51_M_SOURCE_SUBRANGE_CROSSWALK.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_M_SOURCE_SUBRANGE_CROSSWALK.json",
+      "bytes": 10479,
+      "sha256": "339444c1c36ab445c1041c4445fe2813667c1a5aefc482def07c300e18921f17"
+    },
+    {
+      "path": "ROOT_Q51_STAGE.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_STAGE.json",
+      "bytes": 825,
+      "sha256": "84039c52681783c48060e7766aa22a09e9cf7916d617baa73288922735c64739"
+    },
+    {
+      "path": "ROOT_Q51_CONTEXT_MIRROR.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_CONTEXT_MIRROR.json",
+      "bytes": 606,
+      "sha256": "700bbc17f2de6e24999e4f6167cf613d2ab6c9ec25255440c2e911aad0618642"
+    },
+    {
+      "path": "ROOT_Q51_SIX_CLEAN_PLANS.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_SIX_CLEAN_PLANS.json",
+      "bytes": 7778,
+      "sha256": "58b2acd74e9bb3afc7c93f2f22f34467973b8ce4902b686fb166688e4699b2d5"
+    },
+    {
+      "path": "ROOT_Q51_NATIVE_BATCH_PROGRESS.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_Q51_NATIVE_BATCH_PROGRESS.json",
+      "bytes": 9299,
+      "sha256": "2b688005703c7660c64fd7f0ae83d960eba97ca050122fca5e8bc1693aba4c91"
+    },
+    {
+      "path": "ROOT_S51_FRESH_COLLECTION.log",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_FRESH_COLLECTION.log",
+      "bytes": 399,
+      "sha256": "4bc391dba01bc1e56c91a3866f4c1ece2d57ffa2e77a1ce9c90087a5ff3e0cfe"
+    },
+    {
+      "path": "ROOT_S51_ACTUAL_INDEX_GENERATION.log",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_ACTUAL_INDEX_GENERATION.log",
+      "bytes": 330,
+      "sha256": "730304123b38153bd932d66b6624bd159e471a0a0aefe7bf51e69f0b7b9d0aeb"
+    },
+    {
+      "path": "ROOT_S51_INDEX_AND_FULL_EXISTING_ROUTE.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_INDEX_AND_FULL_EXISTING_ROUTE.json",
+      "bytes": 422114,
+      "sha256": "d0ba3fd38a97ec7b1cd66d87b8b0d0cd8565166b31b79351954303451a0041f1"
+    },
+    {
+      "path": "ROOT_S51_NORMAL_REGISTERED_VALIDATION.log",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_NORMAL_REGISTERED_VALIDATION.log",
+      "bytes": 104489,
+      "sha256": "c843ece95ae51e35d33874fffc18cc271b76e63c6e299ce26a0c573c8488cac9"
+    },
+    {
+      "path": "ROOT_S51_PROOF_READ_SCOPE_CONTROLS.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_PROOF_READ_SCOPE_CONTROLS.json",
+      "bytes": 3933,
+      "sha256": "f6fc45dfc86d6fde040433f5b562605aabd2776daff3fad0eb95c2c64a67c77f"
+    },
+    {
+      "path": "ROOT_S51_PROOF_READ_SELFTEST_PROFILE.sb",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_PROOF_READ_SELFTEST_PROFILE.sb",
+      "bytes": 2122,
+      "sha256": "92c8637a7244fa84091de0c8890100879772aae523f75683832c8fc679fe2e3f"
+    },
+    {
+      "path": "ROOT_S51_NORMAL_READ_INPUT_PIN_UPDATE.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_NORMAL_READ_INPUT_PIN_UPDATE.json",
+      "bytes": 1261,
+      "sha256": "4cd540330a8b8cc7df5adf907705dc8a4f8a9de6cfde91d0e5582fcc66193c8f"
+    },
+    {
+      "path": "thetree-p04-s51-proof-read-cli.py",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/thetree-p04-s51-proof-read-cli.py",
+      "bytes": 7604,
+      "sha256": "83532b4fcd4f7308a936dfe0951fc6bc43de60f38cb528e9bbcb43d6225bcc01"
+    },
+    {
+      "path": "test_s51_proof_read_scope.py",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/test_s51_proof_read_scope.py",
+      "bytes": 3820,
+      "sha256": "ccf6512b3b64c90df92a7a70aee0f8c38ce44be378716a13f7c13fc886ffad2e"
+    },
+    {
+      "path": "thetree-p04-full-context-review-78581500-cli.py",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/thetree-p04-full-context-review-78581500-cli.py",
+      "bytes": 4617,
+      "sha256": "8a3554c4458ae753ead2faf0315daee54e4e15babd19107e0900dd65ea32efa7"
+    },
+    {
+      "path": "ROOT_REVIEW_FILE_TRANSPORT_CURRENT_S51_PIN.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_REVIEW_FILE_TRANSPORT_CURRENT_S51_PIN.json",
+      "bytes": 728,
+      "sha256": "dacc873b83b2c6d700c0b6a903cb3ff5eb11a61bb56eefa1f91a2ad4f7578654"
+    },
+    {
+      "path": "ACTUAL_OPUS_REPAIR51_CANONICAL_DECISION.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ACTUAL_OPUS_REPAIR51_CANONICAL_DECISION.json",
+      "bytes": 8550,
+      "sha256": "9c25a719c7af5b8320e8898bf9ba3ad47187fc3f707a772e72cd62ee2da7e507"
+    },
+    {
+      "path": "ACTUAL_OPUS_REPAIR51_RUN_DECISION.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ACTUAL_OPUS_REPAIR51_RUN_DECISION.json",
+      "bytes": 7618,
+      "sha256": "527227be07cde7b82a6873034dffe7891a6d6def4f6aa35e000a1b114a616d7d"
+    },
+    {
+      "path": "ROOT_S51_CONTINUATION_STATUS.json",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/ROOT_S51_CONTINUATION_STATUS.json",
+      "bytes": 550,
+      "sha256": "290fe5fb14f671619fc19e0868ce261870ba800476b18c14d59997feeb580af6"
+    },
+    {
+      "path": "continue_s51_after_native.py",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/continue_s51_after_native.py",
+      "bytes": 6939,
+      "sha256": "fd72e9d19ee02ae704a402da2ce8393635d109504ff1bcdd0bd461adb307e144"
+    },
+    {
+      "path": "prepare_s51_whole_review_materials.py",
+      "original": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/prepare_s51_whole_review_materials.py",
+      "bytes": 11095,
+      "sha256": "03dc80146e2e78212ada1f48079857dec1e41b7652b706c708c3fd44247c07cb"
+    },
+    {
+      "path": "prior-independent-S50-review/result.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/2881795e471940518ec99d779735bdf1/result.json",
+      "bytes": 7259,
+      "sha256": "a3f321481c70a90cdefc22babc4e1a7ea95e0d073884f2d450781f4e5d84448b"
+    },
+    {
+      "path": "prior-independent-S50-review/stdout.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/2881795e471940518ec99d779735bdf1/stdout.log",
+      "bytes": 15996,
+      "sha256": "8d39f4e9434b569a9b247e1c9e110c59a055841ce292796beb85e4c786f218d5"
+    },
+    {
+      "path": "prior-independent-S50-review/stderr.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/2881795e471940518ec99d779735bdf1/stderr.log",
+      "bytes": 0,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "path": "prior-independent-S50-review/command.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/2881795e471940518ec99d779735bdf1/command.json",
+      "bytes": 1836,
+      "sha256": "50116a777156076409ab8f5d52077e1bc01ce390d123bc3daf7177eab9a6bb68"
+    },
+    {
+      "path": "actual-registered-validation/report.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/7e1c6381e5fb4c7f903d8bec7cfbdb84-validation.json",
+      "bytes": 365,
+      "sha256": "a5b40c80ba8ac307ec825b89a4384284b6dbcbf93d4b8f1d2c54f772fedd380c"
+    },
+    {
+      "path": "actual-registered-validation/fcb1a8310639410a94b3ca60f4b9562d/command.json",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/command.json",
+      "bytes": 729,
+      "sha256": "f591fedfa02ebc70fffe0f6ea44a752854d72d7a91a43ae66802ccef4ea0a583"
+    },
+    {
+      "path": "actual-registered-validation/fcb1a8310639410a94b3ca60f4b9562d/stdout.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/stdout.log",
+      "bytes": 170,
+      "sha256": "562d7ec566286433aa2cceb39a40f4fdecfe65b349be00d885c7c87575fb9041"
+    },
+    {
+      "path": "actual-registered-validation/fcb1a8310639410a94b3ca60f4b9562d/stderr.log",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/stderr.log",
+      "bytes": 0,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "path": "actual-registered-validation/fcb1a8310639410a94b3ca60f4b9562d/sandbox.sb",
+      "original": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d/sandbox.sb",
+      "bytes": 2132,
+      "sha256": "de905ae8f6f4f29d101e7cd7cbff66945fba137cd922ac4efd09923afbb084f1"
+    }
+  ],
+  "file_limit": null,
+  "byte_limit": null,
+  "formal_acceptance": false
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/review/command.json

@@ -0,0 +1,48 @@
+{
+  "argv": [
+    "/Users/korizatou114/.local/bin/claude",
+    "-p",
+    "--safe-mode",
+    "--restricted",
+    "--output-format",
+    "json",
+    "--tools",
+    "Read,Grep,Glob",
+    "--strict-mcp-config",
+    "--mcp-config",
+    "{\"mcpServers\":{}}",
+    "--setting-sources",
+    "",
+    "--no-session-persistence",
+    "--permission-mode",
+    "plan",
+    "--json-schema",
+    "{\"type\": \"object\", \"additionalProperties\": false, \"required\": [\"task_id\", \"commit\", \"status\", \"summary\", \"acceptance_ids\", \"findings\"], \"properties\": {\"task_id\": {\"type\": \"string\", \"enum\": [\"P04-01\"]}, \"commit\": {\"type\": \"string\", \"enum\": [\"785815002eb750b0bef3c26fe2ca492b16b280be\"]}, \"status\": {\"type\": \"string\", \"enum\": [\"submitted\", \"pass\", \"changes_requested\", \"blocked\"]}, \"summary\": {\"type\": \"string\"}, \"acceptance_ids\": {\"type\": \"array\", \"items\": {\"type\": \"string\"}}, \"findings\": {\"type\": \"array\", \"items\": {\"type\": \"object\", \"additionalProperties\": false, \"required\": [\"severity\", \"message\"], \"properties\": {\"severity\": {\"type\": \"string\", \"enum\": [\"critical\", \"high\", \"medium\", \"low\"]}, \"message\": {\"type\": \"string\"}}}}}}",
+    "--model",
+    "claude-opus-5-5"
+  ],
+  "cwd": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-review-37845ae6",
+  "env_names": [
+    "AGY_CLI_DISABLE_AUTO_UPDATE",
+    "BROWSER_PROFILE_DIR",
+    "BUILD_OUTPUT_DIR",
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC",
+    "CLAUDE_CODE_OAUTH_TOKEN",
+    "GIT_TERMINAL_PROMPT",
+    "HOME",
+    "LANG",
+    "LC_ALL",
+    "LOGNAME",
+    "MAC_CHROMIUM_TMPDIR",
+    "PATH",
+    "PORT",
+    "PYTHONDONTWRITEBYTECODE",
+    "TEMP",
+    "TERM",
+    "TEST_DATABASE_PATH",
+    "TMP",
+    "TMPDIR",
+    "USER"
+  ],
+  "execution": "sandbox"
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/validation/command.json

@@ -0,0 +1,31 @@
+{
+  "argv": [
+    "/opt/homebrew/Cellar/python@3.12/3.12.13_2/Frameworks/Python.framework/Versions/3.12/bin/python3.12",
+    "-B",
+    "tools/check_p04_order_evidence.py",
+    "--verify-only"
+  ],
+  "cwd": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-validation-52fed5f6",
+  "env_names": [
+    "AGY_CLI_DISABLE_AUTO_UPDATE",
+    "BROWSER_PROFILE_DIR",
+    "BUILD_OUTPUT_DIR",
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC",
+    "GIT_TERMINAL_PROMPT",
+    "HOME",
+    "LANG",
+    "LC_ALL",
+    "LOGNAME",
+    "MAC_CHROMIUM_TMPDIR",
+    "PATH",
+    "PORT",
+    "PYTHONDONTWRITEBYTECODE",
+    "TEMP",
+    "TERM",
+    "TEST_DATABASE_PATH",
+    "TMP",
+    "TMPDIR",
+    "USER"
+  ],
+  "execution": "sandbox"
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/validation/receipt.json

@@ -0,0 +1,14 @@
+{
+  "task_id": "P04-01",
+  "commit": "785815002eb750b0bef3c26fe2ca492b16b280be",
+  "kind": "validation",
+  "checks": [
+    {
+      "id": "p04-acceptance",
+      "exit_code": 0,
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p04-01/runs/fcb1a8310639410a94b3ca60f4b9562d",
+      "passed": true
+    }
+  ],
+  "passed": true
+}

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/validation/sandbox.sb

@@ -0,0 +1,14 @@
+(version 1)
+(allow default)
+(deny file-write*)
+(deny file-read-data (require-all (subpath "/Users/korizatou114") (require-not (literal "/Users/korizatou114")) (require-not (literal "/Users/korizatou114/.local")) (require-not (literal "/Users/korizatou114/.local/share")) (require-not (literal "/Users/korizatou114/Projects")) (require-not (literal "/Users/korizatou114/Projects/TheTree-managed-worktrees")) (require-not (literal "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01")) (require-not (literal "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime")) (require-not (subpath "/Users/korizatou114/.local/bin")) (require-not (subpath "/Users/korizatou114/.local/share/claude")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r51-78581500")) (require-not (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-validation-52fed5f6")) (require-not (subpath "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/.git"))))
+(allow file-write* (subpath "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01"))
+(allow file-write* (literal "/dev/null") (literal "/dev/tty") (literal "/dev/stdout") (literal "/dev/stderr"))
+(deny file-read* file-write* (subpath "/private/tmp/the-tree-p24-02-control-r02"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/Library/Application Support/agent-control"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.ssh"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.aws"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.azure"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/.config/gcloud"))
+(deny file-read* file-write* (subpath "/Users/korizatou114/Library/Keychains"))
+(deny file-write* (subpath "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/.git"))

artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/validation/stdout.log

@@ -0,0 +1 @@
+{"task_id": "P04-01", "machine_verified": true, "formal_acceptance": false, "role": "prospective composition", "actual_head": "785815002eb750b0bef3c26fe2ca492b16b280be"}

autoload/simulation_runtime.gd

@@ -15,6 +15,8 @@ const STARTER_MANA_OUTPUT := 100
 const STARTER_MANA_SOURCE := &"world_tree.mana_source"
 const STARTER_MANA_BUS := &"world_tree.mana_bus"
 const PLAYER_CASH_ACCOUNT := &"PLAYER_CASH"
+## The settlement.funds report definition (see _daily_fund_report).
+const FUND_REPORT_VERSION := 2
 const CONSTRUCTION_EXPENSE_ACCOUNT := &"CONSTRUCTION_EXPENSE"
 const OPERATING_EXPENSE_ACCOUNT := &"OPERATING_EXPENSE"
 const AUTHORITY_FINE_ACCOUNT := &"AUTHORITY_FINE_EXPENSE"
@@ -29,10 +31,13 @@ const AutoPurchasePlansType := preload("res://scripts/supply/supply_auto_purchas
 const CLEANING_RUNTIME_SNAPSHOT_VERSION := 12
 const WEATHER_RUNTIME_SNAPSHOT_VERSION := 11
 const FacilityCleanliness = preload("res://scripts/environment/facility_cleanliness_service.gd")
+const ManaReserveCycle = preload("res://scripts/mana/mana_reserve_cycle.gd")
+const WarpService = preload("res://scripts/transport/warp_service.gd")
 const CleaningBridge = preload("res://scripts/environment/facility_cleaning_bridge.gd")
 const CleaningPolicy = preload("res://scripts/environment/facility_cleaning_policy.gd")
 const UPKEEP_RUNTIME_SNAPSHOT_VERSION := 10
 const WeatherTimeline = preload("res://scripts/environment/weather_timeline.gd")
+const NaturalWeather = preload("res://scripts/environment/natural_weather_policy.gd")
 const STAIRS_RUNTIME_SNAPSHOT_VERSION := 9
 const TRANSPORT_RUNTIME_SNAPSHOT_VERSION := 8
 const SUPPLY_RUNTIME_SNAPSHOT_VERSION := 7
@@ -81,6 +86,7 @@ const RNG_STREAM_IDS: Array[StringName] = [
 	&"defense",
 	&"event",
 	&"loot",
+	&"weather",
 ]
 const DEFENSE_COMMAND_TYPES: Array[StringName] = [
 	&"create_defense_raid",
@@ -108,6 +114,7 @@ var facility_cleanliness := FacilityCleanliness.new()
 var cleaning_policy := CleaningPolicy.new()
 var cleaning_bridge := CleaningBridge.new()
 var facility_upkeep := FacilityUpkeepAccrual.new()
+var mana_reserve := ManaReserveCycle.new()
 var upkeep_settlement := FacilityUpkeepSettlement.new()
 var economy_service: EconomyService
 var construction_resource_state: LedgerBackedResourceState
@@ -441,7 +448,7 @@ func initialize(clock: SimulationKernel, state: Variant, seed := DEFAULT_WORLD_S
 	)
 	_initialized = true
 	var report := definition_registry.rebuild_from_paths(
-		FacilityCatalog.FACILITY_PATHS + FacilityCatalog.INFRASTRUCTURE_FACILITY_PATHS + FacilityCatalog.RESCUE_FACILITY_PATHS + FacilityCatalog.ORIGINAL_FACILITY_PATHS)
+		FacilityCatalog.FACILITY_PATHS + FacilityCatalog.INFRASTRUCTURE_FACILITY_PATHS + FacilityCatalog.RESCUE_FACILITY_PATHS + FacilityCatalog.ORIGINAL_FACILITY_PATHS + FacilityCatalog.TRANSPORT_FACILITY_PATHS)
 	var catalog_registration_ok := _catalog_definitions_are_registered(guest_service)
 	report[&"content_catalog"] = mvp_content_report.duplicate(true)
 	report[&"progression_initialized"] = initial_progression_ok
@@ -458,6 +465,8 @@ func initialize(clock: SimulationKernel, state: Variant, seed := DEFAULT_WORLD_S
 	if not report[&"valid"]:
 		_clock.set_paused(true)
 		definition_validation_failed.emit(report)
+	# A13: a new game opening at 06:00 draws its first day once streams exist.
+	_draw_natural_weather_if_due(_clock.absolute_minute)
 	_publish_snapshot(_clock.absolute_minute)
 	return report
 
@@ -539,6 +548,7 @@ func create_snapshot() -> Dictionary:
 			&"path": path_service.create_snapshot(),
 			&"movement_credits": _serialize_movement_credits(),
 			&"mana": mana_network_service.create_snapshot(),
+			&"mana_reserve": mana_reserve.create_snapshot(),
 			&"economy": economy_service.create_snapshot(),
 			&"facility_upkeep": facility_upkeep.create_snapshot(),
 			&"upkeep_settlement": upkeep_settlement.create_snapshot(),
@@ -676,6 +686,8 @@ func _restore_snapshot_internal(snapshot: Dictionary, recovery_mode: bool) -> bo
 			runtime_current_keys.append(&"auto_purchase_plans")
 		if runtime_data.has(&"special_peeping_rooms"):
 			runtime_current_keys.append(&"special_peeping_rooms")
+		if runtime_data.has(&"mana_reserve"):
+			runtime_current_keys.append(&"mana_reserve")
 		if not _dictionary_has_exact_canonical_keys(runtime_data, runtime_current_keys) \
 				or typeof(runtime_data.get(&"runtime_schema_version", null)) != TYPE_INT \
 				or typeof(runtime_data.get(&"world_seed", null)) != TYPE_INT \
@@ -857,6 +869,23 @@ func _restore_snapshot_internal(snapshot: Dictionary, recovery_mode: bool) -> bo
 	var restored_mana := ManaNetworkService.new()
 	if not restored_mana.restore_snapshot(runtime_data[&"mana"]):
 		return false
+	# A06: saves without the finite reserve keep an explicit stored amount
+	# (0 stays stopped) only within capacity; nothing is silently truncated.
+	var restored_mana_reserve := ManaReserveCycle.new()
+	var saved_game_resources: Variant = snapshot[&"game_state"].get(&"resources", null)
+	if not saved_game_resources is Dictionary:
+		return false
+	var saved_mana: Variant = saved_game_resources.get(&"mana", saved_game_resources.get("mana", null))
+	if runtime_data.has(&"mana_reserve"):
+		# Between boundaries Mana may exceed capacity; the next boundary records
+		# and discards the excess, so only a valid integer amount is required.
+		if not ManaReserveCycle.stored_amount_is_valid(saved_mana) \
+				or not restored_mana_reserve.restore_snapshot(runtime_data[&"mana_reserve"]) \
+				or restored_mana_reserve.get_minute() > restored_minute:
+			return false
+	elif not ManaReserveCycle.amount_is_valid(saved_mana) \
+			or not restored_mana_reserve.start_at(restored_minute):
+		return false
 	var restored_economy := EconomyService.new()
 	if not restored_economy.restore_snapshot(runtime_data[&"economy"]):
 		return false
@@ -886,6 +915,9 @@ func _restore_snapshot_internal(snapshot: Dictionary, recovery_mode: bool) -> bo
 			return false
 		if not FacilityUpkeepSettlement.prepare_accounts(restored_economy) or not restored_upkeep.start_at(restored_minute)[&"ok"]:
 			return false
+	# A12: a save made before the funds were split reads every Gold as front funds.
+	if not FinancePolicy.prepare_accounts(restored_economy):
+		return false
 	var saved_resources: Variant = snapshot[&"game_state"].get(&"resources", null)
 	if not saved_resources is Dictionary \
 		or int(saved_resources.get(&"gold", saved_resources.get("gold", -1))) \
@@ -1235,6 +1267,8 @@ func _restore_snapshot_internal(snapshot: Dictionary, recovery_mode: bool) -> bo
 	if not _validate_elevator_crosslinks(restored_elevators, restored_path, restored_construction,
 		restored_guests, restored_staff, restored_runtime_domain_minute):
 		return false
+	if not WarpService.connectors_match(restored_path, restored_construction.get_facilities()):
+		return false
 	for facility: FacilityInstance in restored_facilities.get_instances():
 		for staff_id: StringName in facility.active_staff_ids:
 			if not restored_elevators.get_actor_trip(_staff_path_actor_id(staff_id)).is_empty() and not CleaningBridge.is_deployed(restored_staff.get_staff(staff_id), facility, restored_staff):
@@ -1261,6 +1295,18 @@ func _restore_snapshot_internal(snapshot: Dictionary, recovery_mode: bool) -> bo
 			return false
 	elif runtime_data.has(&"weather") or not restored_weather.initialize(&"clear", restored_minute):
 		return false
+	# A13: the saved day's draw must be the draw rule's own result (SPEC section 5.3).
+	if not NaturalWeather.is_consistent_draw(restored_weather.get_today_draw()):
+		return false
+	# A13 rain holds must still describe a present guest's extended plan.
+	var rain_holds := restored_weather.get_rain_holds()
+	for held_key: Variant in rain_holds:
+		var held_guest := restored_guests.get_guest(StringName(held_key))
+		if held_guest == null or held_guest.planned_exit_at != int(rain_holds[held_key]["extended_to"]):
+			return false
+	var saved_weather: Variant = runtime_data.get(&"weather", null)
+	var weather_stream_required: bool = saved_weather is Dictionary \
+		and int(saved_weather.get("version", 0)) >= WeatherTimeline.VERSION
 	var restored_cleanliness := FacilityCleanliness.new()
 	if runtime_schema_version >= CLEANING_RUNTIME_SNAPSHOT_VERSION:
 		if not runtime_data.get(&"facility_cleanliness") is Dictionary or not restored_cleanliness.restore_snapshot(runtime_data[&"facility_cleanliness"]):
@@ -1293,6 +1339,12 @@ func _restore_snapshot_internal(snapshot: Dictionary, recovery_mode: bool) -> bo
 		if has_defense_snapshot:
 			return false
 		restored_streams[&"defense"] = DeterministicRng.from_root_seed(restored_world_seed, &"defense")
+	# A13 migration: saves before natural weather start the weather stream from
+	# the world seed, as defense did (SPEC section 5.2).
+	if not restored_streams.has(&"weather"):
+		if weather_stream_required:
+			return false
+		restored_streams[&"weather"] = DeterministicRng.from_root_seed(restored_world_seed, &"weather")
 	if runtime_schema_version >= DEFENSE_RUNTIME_SNAPSHOT_VERSION:
 		for required_stream_id: StringName in RNG_STREAM_IDS:
 			if not restored_streams.has(required_stream_id):
@@ -1325,6 +1377,7 @@ func _restore_snapshot_internal(snapshot: Dictionary, recovery_mode: bool) -> bo
 	_movement_credits = (restored_movement_credits as Dictionary).duplicate(true)
 	_connect_path_performance_signal()
 	mana_network_service = restored_mana
+	mana_reserve = restored_mana_reserve
 	weather = restored_weather
 	facility_cleanliness = restored_cleanliness
 	facility_upkeep = restored_upkeep
@@ -1909,11 +1962,14 @@ func _operations_closed_arrears_total() -> int:
 	var last_close := 0
 	if operations_coordinator != null and operations_coordinator.get_open_financial_day() > 1:
 		last_close = operations_coordinator.get_daily_close_minute(operations_coordinator.get_open_financial_day() - 1)
-	return _staff_payroll_arrears_total(staff_service) + upkeep_settlement.get_arrears_through(last_close)
+	return _staff_payroll_arrears_total(staff_service) + upkeep_settlement.get_arrears_through(last_close) \
+		+ _finance_arrears_through(economy_service, last_close)
 
 
 func _operations_total_arrears() -> int:
-	return _staff_payroll_arrears_total(staff_service) + upkeep_settlement.get_arrears_total()
+	return _staff_payroll_arrears_total(staff_service) + upkeep_settlement.get_arrears_total() \
+		- economy_service.get_balance(FinancePolicy.RANK_TAX_PAYABLE) \
+		- economy_service.get_balance(FinancePolicy.LOAN_INTEREST_PAYABLE)
 
 
 func _advance_operations_time(absolute_minute: int) -> void:
@@ -2054,6 +2110,7 @@ func _build_operations_external_state() -> Dictionary:
 		&"personal_action_points": _personal_action_points,
 		# The remaining aggregates are reachable through Event actions or signals.
 		&"mana": mana_network_service.create_snapshot(),
+		&"mana_reserve": mana_reserve.create_snapshot(),
 		&"logistics_dispatcher": logistics_dispatcher.create_snapshot(),
 		&"logistics_requests": _serialize_logistics_requests(),
 		&"defense": defense_service.create_snapshot(),
@@ -2091,7 +2148,7 @@ func _restore_operations_external_state(token: Variant) -> bool:
 		&"excavation", &"spatial_subslots", &"route_projection",
 		&"facility_infrastructure",
 		&"movement_credits", &"domain_events", &"id_generator", &"rng_streams",
-		&"progression", &"hired_staff_candidate_ids", &"mana",
+		&"progression", &"hired_staff_candidate_ids", &"mana", &"mana_reserve",
 		&"logistics_dispatcher", &"defense", &"construction",
 	]
 	for key: StringName in required_dictionary_keys:
@@ -2152,6 +2209,7 @@ func _restore_operations_external_state(token: Variant) -> bool:
 	var ids_ok := id_generator.restore_snapshot(saved[&"id_generator"])
 	var progression_ok := progression_service.restore_snapshot(saved[&"progression"])
 	var mana_ok := mana_network_service.restore_snapshot(saved[&"mana"])
+	mana_ok = mana_reserve.restore_snapshot(saved[&"mana_reserve"]) and mana_ok
 	var dispatcher_ok := logistics_dispatcher.restore_snapshot(saved[&"logistics_dispatcher"])
 	var defense_ok := defense_service.restore_snapshot(saved[&"defense"])
 	var construction_ok := construction_service.restore_snapshot(saved[&"construction"])
@@ -2258,6 +2316,7 @@ func _operations_external_state_matches(saved: Dictionary) -> bool:
 			or not _strict_variants_equal(id_generator.create_snapshot(), saved[&"id_generator"]) \
 			or not _strict_variants_equal(progression_service.create_snapshot(), saved[&"progression"]) \
 			or not _strict_variants_equal(mana_network_service.create_snapshot(), saved[&"mana"]) \
+			or not _strict_variants_equal(mana_reserve.create_snapshot(), saved[&"mana_reserve"]) \
 			or not _strict_variants_equal(logistics_dispatcher.create_snapshot(), saved[&"logistics_dispatcher"]) \
 			or not _strict_variants_equal(_serialize_logistics_requests(), saved[&"logistics_requests"]) \
 			or not _strict_variants_equal(defense_service.create_snapshot(), saved[&"defense"]) \
@@ -2475,6 +2534,13 @@ func _operations_midnight_upkeep_boundary(payload: Dictionary, phase: StringName
 	var prepared := _run_operations_test_boundary_hook(&"MIDNIGHT_UPKEEP", payload, OPERATIONS_TEST_PREPARE_PHASE, token)
 	if not bool(prepared.get(&"ok", false)):
 		return prepared
+	var midnight_due := _upkeep_debt_through(int(minute))
+	if midnight_due < 0:
+		return {&"ok": false, &"reason": &"UPKEEP_DUE_PREVIEW_FAILED"}
+	var midnight_top_up := top_up_front_fund(midnight_due, int(minute), StringName("finance.back_top_up.midnight.%d" % int(minute)))
+	if not midnight_top_up.is_success() or (int(midnight_top_up.details.get(&"amount", 0)) > 0 \
+			and not _stage_operations_economy_notification(midnight_top_up)):
+		return {&"ok": false, &"reason": &"BACK_FUND_TOP_UP_FAILED"}
 	var result := _settle_upkeep_through(int(minute))
 	if not bool(result[&"ok"]):
 		return result
@@ -2495,10 +2561,29 @@ func _apply_operations_daily_close(payload: Dictionary, token: Variant) -> Dicti
 	if not bool(prepare_hook.get(&"ok", false)):
 		return prepare_hook
 	var day := int(payload[&"day"])
+	var boundary_minute := int(payload[&"boundary_minute"])
 	var preview := staff_service.preview_daily_payroll(day)
 	if not bool(preview.get(&"ok", false)) \
 			or not preview.get(&"rows", null) is Array:
 		return {&"ok": false, &"reason": &"PAYROLL_PREVIEW_FAILED"}
+	# A09: the hidden fund first covers what the front fund cannot pay of the day's
+	# wages, upkeep, rank tax and loan interest (arrears included).
+	var finance_due := _daily_finance_due(economy_service, int(payload[&"period_start_minute"]), boundary_minute)
+	if not bool(finance_due[&"ok"]):
+		return finance_due
+	var payroll_due := 0
+	for raw_due: Variant in preview[&"rows"]:
+		if raw_due is Dictionary and typeof((raw_due as Dictionary).get(&"total_due", null)) == TYPE_INT:
+			payroll_due += maxi(int(raw_due[&"total_due"]), 0)
+	var upkeep_due := _upkeep_debt_through(boundary_minute)
+	if upkeep_due < 0:
+		return {&"ok": false, &"reason": &"UPKEEP_DUE_PREVIEW_FAILED"}
+	var top_up := top_up_front_fund(payroll_due + upkeep_due + int(finance_due[&"due_total"]), boundary_minute,
+		StringName("finance.back_top_up.day.%08d" % day))
+	if not top_up.is_success():
+		return {&"ok": false, &"reason": &"BACK_FUND_TOP_UP_FAILED", &"result": top_up.to_dictionary()}
+	if int(top_up.details.get(&"amount", 0)) > 0 and not _stage_operations_economy_notification(top_up):
+		return {&"ok": false, &"reason": &"BACK_FUND_TOP_UP_NOTIFICATION_STAGE_FAILED"}
 	var available_gold := economy_service.get_balance(PLAYER_CASH_ACCOUNT)
 	var remaining_gold := available_gold
 	var payments: Dictionary = {}
@@ -2563,6 +2648,17 @@ func _apply_operations_daily_close(payload: Dictionary, token: Variant) -> Dicti
 	if not bool(upkeep_result[&"ok"]):
 		return upkeep_result
 	var upkeep_paid := int(upkeep_result[&"paid_total"])
+	var rank_tax := _post_daily_finance_charge(day, boundary_minute, int(finance_due[&"rank_tax"]),
+		FinancePolicy.RANK_TAX_EXPENSE, FinancePolicy.RANK_TAX_PAYABLE,
+		FinancePolicy.RANK_TAX_CATEGORY, FinancePolicy.RANK_TAX_PAYMENT_CATEGORY, "rank_tax")
+	if not bool(rank_tax[&"ok"]):
+		return rank_tax
+	var loan_interest := _post_daily_finance_charge(day, boundary_minute, int(finance_due[&"loan_interest"]),
+		FinancePolicy.LOAN_INTEREST_EXPENSE, FinancePolicy.LOAN_INTEREST_PAYABLE,
+		FinancePolicy.LOAN_INTEREST_CATEGORY, FinancePolicy.LOAN_INTEREST_PAYMENT_CATEGORY, "loan_interest")
+	if not bool(loan_interest[&"ok"]):
+		return loan_interest
+	var finance_paid := int(rank_tax[&"paid"]) + int(loan_interest[&"paid"])
 	var financials := _build_operations_daily_financials(
 		int(payload[&"period_start_minute"]),
 		int(payload[&"period_end_minute_exclusive"]),
@@ -2574,14 +2670,19 @@ func _apply_operations_daily_close(payload: Dictionary, token: Variant) -> Dicti
 	var arrears_total := int(settlement.details.get(&"unpaid_after_total", -1))
 	if arrears_total < 0 \
 			or arrears_total != _staff_payroll_arrears_total(staff_service) \
-			or economy_service.get_balance(PLAYER_CASH_ACCOUNT) != available_gold - expected_paid_total - upkeep_paid \
+			or economy_service.get_balance(PLAYER_CASH_ACCOUNT) != available_gold - expected_paid_total - upkeep_paid - finance_paid \
 			or int(_state.get_resource(&"gold")) != economy_service.get_balance(PLAYER_CASH_ACCOUNT) \
 			or not bool(economy_service.validate_ledger().get(&"ok", false)) \
 			or not bool(staff_service.validate_invariants().get(&"ok", false)):
 		return {&"ok": false, &"reason": &"DAILY_CLOSE_POSTCONDITION_FAILED"}
+	var funds := _daily_fund_report(economy_service, day, int(payload[&"period_start_minute"]), boundary_minute)
+	if funds.is_empty():
+		return {&"ok": false, &"reason": &"DAILY_FUND_REPORT_FAILED"}
 	var settlement_report := settlement.details.duplicate(true)
 	settlement_report[&"upkeep_arrears_total"] = upkeep_settlement.get_arrears_total()
-	settlement_report[&"arrears_total"] = arrears_total + int(settlement_report[&"upkeep_arrears_total"])
+	settlement_report[&"funds"] = funds
+	settlement_report[&"arrears_total"] = arrears_total + int(settlement_report[&"upkeep_arrears_total"]) \
+		+ int(funds[&"rank_tax_arrears"]) + int(funds[&"loan_interest_arrears"])
 	return {
 		&"ok": true,
 		&"category_totals": financials[&"category_totals"],
@@ -2618,6 +2719,8 @@ func _build_operations_daily_financials(
 		&"EVENT_COST_RESERVED", &"EVENT_COST_RELEASED", &"INITIALIZATION",
 		&"TRANSFER", &"GENERATION", &"DESTRUCTION", &"MIGRATION",
 		&"SERVICE_CASH_SWEEP", &"WAGE", &"MAINTENANCE_PAYMENT",
+		FinancePolicy.TOP_UP_CATEGORY, FinancePolicy.RANK_TAX_PAYMENT_CATEGORY,
+		FinancePolicy.LOAN_INTEREST_PAYMENT_CATEGORY,
 	]
 	var category_mapping := {
 		&"SERVICE_SALE": &"revenue",
@@ -2631,6 +2734,8 @@ func _build_operations_daily_financials(
 		&"EVENT_COST_COMMITTED": &"cost_of_goods",
 		&"DEFENSE_SKILL_COST": &"cost_of_goods",
 		&"MAINTENANCE_ACCRUAL": &"maintenance",
+		FinancePolicy.RANK_TAX_CATEGORY: &"taxes_and_interest",
+		FinancePolicy.LOAN_INTEREST_CATEGORY: &"taxes_and_interest",
 		&"LOAN_PRINCIPAL_BORROWED": &"financing_principal_inflows",
 		&"LOAN_PRINCIPAL_REPAID": &"financing_principal_outflows",
 	}
@@ -2868,6 +2973,8 @@ func _operations_arrival_boundary(
 			&"ok": not captured.is_empty(),
 			&"token": captured,
 			&"capacity_remaining": maxi(population_cap - guest_service.guest_count(), 0) if int(_state.get_resource(&"mana")) > 0 and weather.permits_new_arrivals() else 0,
+			# A13: rain halves the planned new arrivals of this boundary.
+			&"arrival_percent": NaturalWeather.arrival_percent(weather.get_kind()),
 		}
 	if phase == OperationsCoordinator.PHASE_VALIDATE:
 		return {
@@ -3522,8 +3629,32 @@ func _operations_payroll_crosslinks_are_valid(
 			summary_settlement.erase(&"upkeep_arrears_total")
 		elif upkeep_debt != 0:
 			return false
+		var finance_arrears := 0
+		# A saved report is checked by the definition it was written with: without
+		# the mark it is version 1; any other mark is not a report this game wrote.
+		var fund_version := FUND_REPORT_VERSION
+		if summary_settlement.get(&"funds", null) is Dictionary:
+			var saved_funds: Dictionary = summary_settlement[&"funds"]
+			var mark: Variant = saved_funds.get(&"fund_report_version", saved_funds.get("fund_report_version", null))
+			if mark == null:
+				fund_version = 1
+			elif typeof(mark) != TYPE_INT or int(mark) != FUND_REPORT_VERSION:
+				return false
+		var expected_funds := _daily_fund_report(economy, day, coordinator.get_financial_period_start(day),
+			coordinator.get_daily_close_minute(day), fund_version)
+		if expected_funds.is_empty():
+			return false
+		if summary_settlement.has(&"funds"):
+			if not _strict_variants_equal(_operations_snapshot_comparison_value(summary_settlement[&"funds"]),
+					_operations_snapshot_comparison_value(expected_funds)):
+				return false
+			finance_arrears = int(expected_funds[&"rank_tax_arrears"]) + int(expected_funds[&"loan_interest_arrears"])
+			summary_settlement.erase(&"funds")
+		elif bool(expected_funds[&"has_finance_postings"]):
+			# Days closed before the funds were split carry no fund report and no postings.
+			return false
 		if int(summary_settlement.get(&"arrears_total", -1)) \
-				!= int(staff_record.get(&"unpaid_after_total", -2)) + upkeep_debt \
+				!= int(staff_record.get(&"unpaid_after_total", -2)) + upkeep_debt + finance_arrears \
 				or summary_settlement.get(&"replayed", null) != false:
 			return false
 		summary_settlement.erase(&"arrears_total")
@@ -3570,7 +3701,10 @@ func get_loan_principal_report() -> Dictionary:
 	loans.sort_custom(func(left: Dictionary, right: Dictionary) -> bool: return String(left[&"loan_id"]) < String(right[&"loan_id"]))
 	var valid: bool = _state.get_resource(&"gold") == cash and (loans.is_empty() or _loan_principal_ledger_is_valid(economy_service))
 	var ended: bool = _operations_enabled and operations_coordinator != null and operations_coordinator.is_terminal()
-	return {&"available": true, &"ledger_valid": valid, &"terminal": ended, &"cash": cash, &"next_command_id": _next_command_id, &"loans": loans}
+	# A09: a repayment may use the hidden fund for what the front fund (cash) cannot pay.
+	return {&"available": true, &"ledger_valid": valid, &"terminal": ended, &"cash": cash,
+		&"back_cash": economy_service.get_balance(FinancePolicy.BACK_CASH), &"available_funds": FinancePolicy.available_funds(economy_service),
+		&"next_command_id": _next_command_id, &"loans": loans}
 
 
 ## Atomic principal payment against an already attested loan liability.
@@ -3597,15 +3731,20 @@ func repay_loan_principal(
 		return CommandResult.failed(CommandResult.Code.NOT_FOUND, 0, "The loan liability does not exist.")
 	var remaining := -economy_service.get_balance(liability)
 	var cash := economy_service.get_balance(PLAYER_CASH_ACCOUNT)
-	if amount > remaining or amount > cash or _state.get_resource(&"gold") != cash:
+	if amount > remaining or amount > FinancePolicy.available_funds(economy_service) or _state.get_resource(&"gold") != cash:
 		return CommandResult.failed(CommandResult.Code.VALIDATION_FAILED, 0, "Principal payment exceeds the outstanding principal or available Gold, or its mirror is inconsistent.")
-	# The single balanced posting is atomic. Defer receipts until the Gold
-	# mirror is synchronized, also respecting any enclosing effect scope.
+	# A09: what the front fund cannot pay comes from the hidden fund in the same
+	# balanced posting, so the payment and its top-up are atomic. Defer receipts
+	# until the Gold mirror is synchronized, also respecting any enclosing effect scope.
+	var minute := _runtime_event_minute()
+	var entries: Array = []
+	if amount > cash:
+		entries.append(LedgerEntry.new().configure(&"", minute, PLAYER_CASH_ACCOUNT, FinancePolicy.BACK_CASH,
+			amount - cash, FinancePolicy.TOP_UP_CATEGORY, loan_id, &"", &"finance.back_fund.top_up"))
+	entries.append(LedgerEntry.new().configure(&"", minute, liability, PLAYER_CASH_ACCOUNT,
+		amount, &"LOAN_PRINCIPAL_REPAID", loan_id))
 	economy_service.begin_notification_scope()
-	var result := economy_service.transfer(
-		PLAYER_CASH_ACCOUNT, liability, amount, _runtime_event_minute(),
-		&"LOAN_PRINCIPAL_REPAID", loan_id, idempotency_key
-	)
+	var result := economy_service.post(entries, idempotency_key)
 	if result.is_success():
 		_state.set_resource(&"gold", economy_service.get_balance(PLAYER_CASH_ACCOUNT))
 		result.details[&"loan_id"] = loan_id
@@ -3615,6 +3754,144 @@ func repay_loan_principal(
 	return result
 
 
+## A09: what the front fund cannot pay is covered from the hidden fund first. The move
+## is posted on its own (BACK_FUND_TOP_UP) and is neither income nor expense.
+func top_up_front_fund(due: int, minute: int, idempotency_key: StringName) -> CommandResult:
+	var front := economy_service.get_balance(PLAYER_CASH_ACCOUNT)
+	var amount := mini(maxi(due - front, 0), economy_service.get_balance(FinancePolicy.BACK_CASH))
+	if amount <= 0:
+		return CommandResult.succeeded(0, {&"amount": 0})
+	var result := economy_service.transfer(FinancePolicy.BACK_CASH, PLAYER_CASH_ACCOUNT, amount, minute,
+		FinancePolicy.TOP_UP_CATEGORY, &"", idempotency_key, &"finance.back_fund.top_up", &"", false)
+	# Callers publish the notification, which also refreshes the Gold projection.
+	if result.is_success():
+		result.details[&"amount"] = amount
+	return result
+
+
+## Whole Gold the closed upkeep periods through the minute would owe, arrears
+## included; -1 if a period cannot be planned. Nothing is changed.
+func _upkeep_debt_through(minute: int) -> int:
+	var periods: Array = []
+	for period: Dictionary in facility_upkeep.get_closed_periods_from(upkeep_settlement.get_settled_period_count()):
+		if int(period[&"period_end"]) <= minute:
+			periods.append(period)
+	return upkeep_settlement.preview_debt(periods)
+
+
+## A10/A11: the closed day's rank tax and loan interest, with their older arrears.
+func _daily_finance_due(economy: EconomyService, period_start: int, boundary_minute: int) -> Dictionary:
+	var totals: Variant = _operations_expected_category_totals(economy, period_start, boundary_minute, 0)
+	if totals == null:
+		return {&"ok": false, &"reason": &"DAILY_SALES_UNAVAILABLE"}
+	var tax := FinancePolicy.rank_tax(int(totals[&"revenue"]))
+	var interest := FinancePolicy.loan_interest(FinancePolicy.outstanding_principal(economy))
+	return {&"ok": true, &"rank_tax": tax, &"loan_interest": interest,
+		&"due_total": tax + interest - economy.get_balance(FinancePolicy.RANK_TAX_PAYABLE)
+			- economy.get_balance(FinancePolicy.LOAN_INTEREST_PAYABLE)}
+
+
+## Accrues a daily charge at the end of the closed day and pays its older arrears
+## first, then the new amount, from the front fund; the rest stays payable.
+func _post_daily_finance_charge(day: int, boundary_minute: int, new_amount: int, expense: StringName,
+		payable: StringName, category: StringName, payment_category: StringName, kind: String) -> Dictionary:
+	var due := new_amount - economy_service.get_balance(payable)
+	var paid := mini(due, economy_service.get_balance(PLAYER_CASH_ACCOUNT))
+	var source := StringName("finance-day-%08d" % day)
+	var entries: Array = []
+	if new_amount > 0:
+		entries.append(LedgerEntry.new().configure(&"", boundary_minute - 1, expense, payable, new_amount,
+			category, source, &"", StringName("finance.%s.accrued" % kind)))
+	if paid > 0:
+		entries.append(LedgerEntry.new().configure(&"", boundary_minute, payable, PLAYER_CASH_ACCOUNT, paid,
+			payment_category, source, &"", StringName("finance.%s.paid" % kind)))
+	if not entries.is_empty():
+		var posted := economy_service.post(entries, StringName("finance.%s.day.%08d" % [kind, day]), &"", false)
+		if not posted.is_success():
+			return {&"ok": false, &"reason": &"FINANCE_LEDGER_POST_FAILED", &"result": posted.to_dictionary()}
+		if not _stage_operations_economy_notification(posted):
+			return {&"ok": false, &"reason": &"FINANCE_NOTIFICATION_STAGE_FAILED"}
+	return {&"ok": true, &"new": new_amount, &"paid": paid, &"arrears": due - paid}
+
+
+## The fund side of a closed day, derived only from the ledger, so the live close
+## and a restored save produce the same report. Version 2 (marked in the report):
+## back_top_up is every top-up of the business day, the operation-time purchases
+## and repayments and the legacy 00:00 upkeep as well as the close's own. A report
+## without the mark is version 1, written while back_top_up counted only the
+## close's own top-up; a restore checks it by that definition, not a looser one.
+func _daily_fund_report(economy: EconomyService, day: int, period_start: int, boundary_minute: int,
+		version := FUND_REPORT_VERSION) -> Dictionary:
+	if economy == null or day <= 0 or period_start < 0 or boundary_minute <= period_start \
+			or version not in [1, FUND_REPORT_VERSION]:
+		return {}
+	var report := {
+		&"revenue_front": 0, &"revenue_back": 0, &"back_top_up": 0,
+		&"rank_tax": 0, &"rank_tax_paid": 0, &"loan_interest": 0, &"loan_interest_paid": 0,
+	}
+	for entry: LedgerEntry in economy.get_entries():
+		if entry.absolute_minute >= period_start and entry.absolute_minute < boundary_minute \
+				and entry.category == &"SERVICE_CASH_SWEEP":
+			if entry.debit_account == FinancePolicy.BACK_CASH:
+				report[&"revenue_back"] = int(report[&"revenue_back"]) + entry.amount
+			elif entry.debit_account == PLAYER_CASH_ACCOUNT:
+				report[&"revenue_front"] = int(report[&"revenue_front"]) + entry.amount
+	var keyed := {
+		&"back_top_up": StringName("finance.back_top_up.day.%08d" % day),
+		&"rank_tax": StringName("finance.rank_tax.day.%08d" % day),
+		&"loan_interest": StringName("finance.loan_interest.day.%08d" % day),
+	}
+	var postings := false
+	for field: StringName in keyed:
+		var transaction := economy.get_transaction_id_for_idempotency_key(keyed[field])
+		if transaction.is_empty():
+			continue
+		postings = true
+		for entry: LedgerEntry in economy.get_transaction_entries(transaction):
+			if field == &"back_top_up" and entry.category == FinancePolicy.TOP_UP_CATEGORY:
+				report[field] = int(report[field]) + entry.amount
+			elif field != &"back_top_up" and entry.category in [FinancePolicy.RANK_TAX_CATEGORY, FinancePolicy.LOAN_INTEREST_CATEGORY]:
+				report[field] = int(report[field]) + entry.amount
+			elif field != &"back_top_up" and entry.category in [FinancePolicy.RANK_TAX_PAYMENT_CATEGORY, FinancePolicy.LOAN_INTEREST_PAYMENT_CATEGORY]:
+				report[StringName(String(field) + "_paid")] = int(report[StringName(String(field) + "_paid")]) + entry.amount
+			else:
+				return {}
+	if version == FUND_REPORT_VERSION:
+		# The closes are keyed; the previous day's close is posted at period_start.
+		var closes := {}
+		for close_day: int in [day - 1, day]:
+			var close := economy.get_transaction_id_for_idempotency_key(StringName("finance.back_top_up.day.%08d" % close_day))
+			if not close.is_empty():
+				closes[close] = true
+		for entry: LedgerEntry in economy.get_entries():
+			if entry.category == FinancePolicy.TOP_UP_CATEGORY and entry.absolute_minute >= period_start \
+					and entry.absolute_minute < boundary_minute and not closes.has(entry.transaction_id):
+				report[&"back_top_up"] = int(report[&"back_top_up"]) + entry.amount
+				postings = true
+		report[&"fund_report_version"] = FUND_REPORT_VERSION
+	report[&"rank_tax_arrears"] = _payable_arrears_through(economy, FinancePolicy.RANK_TAX_PAYABLE, boundary_minute)
+	report[&"loan_interest_arrears"] = _payable_arrears_through(economy, FinancePolicy.LOAN_INTEREST_PAYABLE, boundary_minute)
+	report[&"has_finance_postings"] = postings
+	return report
+
+
+func _payable_arrears_through(economy: EconomyService, payable: StringName, minute: int) -> int:
+	var arrears := 0
+	for entry: LedgerEntry in economy.get_entries():
+		if entry.absolute_minute > minute:
+			continue
+		if entry.credit_account == payable:
+			arrears += entry.amount
+		elif entry.debit_account == payable:
+			arrears -= entry.amount
+	return arrears
+
+
+func _finance_arrears_through(economy: EconomyService, minute: int) -> int:
+	return _payable_arrears_through(economy, FinancePolicy.RANK_TAX_PAYABLE, minute) \
+		+ _payable_arrears_through(economy, FinancePolicy.LOAN_INTEREST_PAYABLE, minute)
+
+
 func _loan_principal_ledger_is_valid(economy: EconomyService) -> bool:
 	if economy == null:
 		return false
@@ -3668,6 +3945,8 @@ func _operations_expected_category_totals(
 		&"EVENT_COST_RESERVED", &"EVENT_COST_RELEASED", &"INITIALIZATION",
 		&"TRANSFER", &"GENERATION", &"DESTRUCTION", &"MIGRATION",
 		&"SERVICE_CASH_SWEEP", &"WAGE", &"MAINTENANCE_PAYMENT",
+		FinancePolicy.TOP_UP_CATEGORY, FinancePolicy.RANK_TAX_PAYMENT_CATEGORY,
+		FinancePolicy.LOAN_INTEREST_PAYMENT_CATEGORY,
 	]
 	var mapping := {
 		&"SERVICE_SALE": &"revenue", &"REFUND": &"refunds",
@@ -3678,6 +3957,8 @@ func _operations_expected_category_totals(
 		&"EVENT_COST_COMMITTED": &"cost_of_goods",
 		&"DEFENSE_SKILL_COST": &"cost_of_goods",
 		&"MAINTENANCE_ACCRUAL": &"maintenance",
+		FinancePolicy.RANK_TAX_CATEGORY: &"taxes_and_interest",
+		FinancePolicy.LOAN_INTEREST_CATEGORY: &"taxes_and_interest",
 		&"LOAN_PRINCIPAL_BORROWED": &"financing_principal_inflows",
 		&"LOAN_PRINCIPAL_REPAID": &"financing_principal_outflows",
 	}
@@ -5225,7 +5506,10 @@ func _initialize_economy() -> void:
 	facility_upkeep = FacilityUpkeepAccrual.new()
 	upkeep_settlement = FacilityUpkeepSettlement.new()
 	FacilityUpkeepSettlement.prepare_accounts(economy_service)
+	FinancePolicy.prepare_accounts(economy_service)
 	facility_upkeep.start_at(_clock.absolute_minute)
+	mana_reserve = ManaReserveCycle.new()
+	mana_reserve.start_at(_clock.absolute_minute)
 	construction_resource_state = _create_resource_adapter(
 		economy_service,
 		CONSTRUCTION_EXPENSE_ACCOUNT,
@@ -7816,7 +8100,8 @@ func _execute_demolish_facility(command: SimulationCommand) -> CommandResult:
 		demolished.command_id = command.command_id
 		var transport_ok := false
 		if demolished.is_success():
-			transport_ok = bool(_synchronize_elevators(_runtime_event_minute()).get(&"ok", false)) and _prune_legacy_stairs_and_movement()
+			transport_ok = bool(_synchronize_elevators(_runtime_event_minute()).get(&"ok", false)) \
+				and bool(_synchronize_warps().get(&"ok", false)) and _prune_legacy_stairs_and_movement()
 		if not transport_ok or not demolished.is_success() \
 				or not _validate_runtime_path_crosslinks(path_service, guest_service, staff_service, _movement_credits, _runtime_event_minute()) \
 				or facility_infrastructure_projector.has_projection(instance_id) \
@@ -8331,6 +8616,11 @@ func _apply_completed_facility_internal(instance: Dictionary, absolute_minute: i
 		var transport := _synchronize_elevators(absolute_minute)
 		if not bool(transport.get(&"ok", false)):
 			return {&"ok": false, &"code": &"ELEVATOR_SYNC_FAILED", &"reason": elevators.last_error, &"details": transport}
+	if definition.id in WarpService.DEFINITION_IDS:
+		_register_facility_mana_consumer(instance)
+		var warp_sync := _synchronize_warps()
+		if not bool(warp_sync.get(&"ok", false)):
+			return {&"ok": false, &"code": &"WARP_SYNC_FAILED", &"reason": String(warp_sync.get(&"reason", "")), &"details": warp_sync}
 	if not _prune_legacy_stairs_and_movement():
 		return {&"ok": false, &"code": &"LEGACY_STAIR_PRUNE_FAILED", &"reason": "Stair topology could not be updated."}
 	if not _publish_domain_event(SimulationDomainEvent.new(
@@ -8518,6 +8808,7 @@ func _advance_guest_vitals(absolute_minute: int) -> void:
 			&"is_night": minute_of_day < 360 or minute_of_day >= 1_080,
 			&"intimacy_day": 3,
 			&"intimacy_night": 7,
+			&"mana_fog": weather.get_kind() == &"mana_fog",
 		}
 	})
 
@@ -8759,13 +9050,17 @@ func get_guest_decision_record(guest_id: StringName) -> Dictionary:
 
 func _advance_guest_ai_decisions(absolute_minute: int) -> void:
 	for guest: GuestRuntime in guest_service.get_guests():
+		# A rider inside a cabin cannot decide, leave or despawn until the
+		# elevator sets it down at a real landing (P14-03: passengers never vanish).
+		if elevators.get_actor_trip(_guest_path_actor_id(guest.guest_id)).get(&"state", &"") == PathService.ELEVATOR_REQUEST_BOARDED:
+			continue
 		match guest.state:
 			GuestRuntime.State.SPAWNING:
 				guest_service.transition_guest(guest.guest_id, GuestRuntime.State.ENTERING, absolute_minute, &"ENTRY_STARTED")
 			GuestRuntime.State.ENTERING:
 				guest_service.transition_guest(guest.guest_id, GuestRuntime.State.DECIDING, absolute_minute, &"ENTRY_COMPLETED")
 			GuestRuntime.State.DECIDING:
-				if guest.planned_exit_at <= absolute_minute:
+				if guest.planned_exit_at <= absolute_minute and not _hold_guest_for_rain(guest, absolute_minute):
 					guest_service.begin_leaving(guest.guest_id, absolute_minute, &"PLANNED_EXIT")
 					continue
 				guest.wallet_gold = economy_service.get_balance(_guest_wallet_account(guest.guest_id))
@@ -8948,7 +9243,8 @@ func _advance_guest_path_travel(
 		actor_id, guest.current_cell, absolute_minute
 	)
 	accumulated = mini(accumulated, required_credit + MOVEMENT_CREDIT_SCALE - 1)
-	if accumulated < required_credit:
+	var guest_warp := _warp_step_connector(path[0], path[1], [])
+	if accumulated < required_credit or not _warp_fare_affordable(guest_warp, 1):
 		_record_blocked_actor_wait(
 			actor_id,
 			guest.guest_id,
@@ -8972,6 +9268,7 @@ func _advance_guest_path_travel(
 		guest.recovery_kind = previous_recovery_kind
 		_report_path_integration_failure(actor_id, guest.guest_id, &"guest", previous_cell)
 		return
+	_charge_warp_fare(guest_warp, [actor_id], previous_cell, guest.current_cell)
 	var remaining_credit := accumulated - required_credit
 	_movement_credits[actor_id] = {
 		&"credit": remaining_credit,
@@ -9074,7 +9371,9 @@ func _advance_staff_task_travel(
 		actor_id, staff.current_cell, absolute_minute
 	)
 	accumulated = mini(accumulated, required_credit + MOVEMENT_CREDIT_SCALE - 1)
-	if accumulated < required_credit:
+	var staff_warp := _warp_step_connector(path[0], path[1], [&"staff"])
+	var warp_riders := 2 if task.task_type == &"rescue_transport" else 1
+	if accumulated < required_credit or not _warp_fare_affordable(staff_warp, warp_riders):
 		_record_blocked_actor_wait(
 			actor_id,
 			staff.staff_id,
@@ -9098,6 +9397,9 @@ func _advance_staff_task_travel(
 			return
 		patient.current_cell = staff.current_cell
 		_record_expected_actor_wait(_staff_path_actor_id(patient.staff_id), patient.current_cell, absolute_minute)
+		_charge_warp_fare(staff_warp, [actor_id, _staff_path_actor_id(patient.staff_id)], previous_cell, staff.current_cell)
+	else:
+		_charge_warp_fare(staff_warp, [actor_id], previous_cell, staff.current_cell)
 	var remaining_credit := accumulated - required_credit
 	_movement_credits[actor_id] = {
 		&"credit": remaining_credit,
@@ -10713,6 +11015,31 @@ func _reservation_references_are_valid(
 			return false
 	return true
 
+## HUD view of the A06 reserve: supply, consumption and storage per interval.
+func get_mana_reserve_report() -> Dictionary:
+	var demand := _mana_reserve_demand()
+	var generation := NaturalWeather.mana_yield(ManaReserveCycle.WORLD_TREE_GENERATION, weather.get_kind())
+	return {
+		&"amount": int(_state.get_resource(&"mana")),
+		&"capacity": ManaReserveCycle.CAPACITY,
+		&"generation": generation,
+		&"interval_minutes": ManaReserveCycle.INTERVAL_MINUTES,
+		&"demand": demand,
+		&"net": generation - demand,
+		&"last_flow": mana_reserve.get_last_flow(),
+	}
+
+
+## A06 upkeep demand: every owned consumer, open or not, except destroyed
+## facilities. Removed facilities are already unregistered from the network.
+func _mana_reserve_demand() -> int:
+	var destroyed: Array[StringName] = []
+	for facility: FacilityInstance in facility_service.get_instances():
+		if facility.suspension_reason == &"DESTROYED":
+			destroyed.append(facility.instance_id)
+	return mana_network_service.get_total_consumer_demand(destroyed)
+
+
 func _advance_mana(absolute_minute: int) -> void:
 	if _operations_tick_blocked:
 		return
@@ -10729,12 +11056,34 @@ func _advance_mana(absolute_minute: int) -> void:
 			infrastructure_preflight.get(&"details", {})
 		)
 		return
+	# A06: generation and upkeep demand settle before local distribution and the
+	# whole-tower gate, so the network and projection see the committed reserve.
+	# A13: mana fog raises the world tree yield of this boundary to x1.2 (floor).
+	var reserve_flow := mana_reserve.advance_to(
+		absolute_minute, int(_state.get_resource(&"mana")), _mana_reserve_demand(),
+		NaturalWeather.mana_yield(ManaReserveCycle.WORLD_TREE_GENERATION, weather.get_kind())
+	)
+	if not bool(reserve_flow.get(&"ok", false)):
+		_latch_infrastructure_failure(
+			StringName(reserve_flow.get(&"code", &"MANA_RESERVE_FAILED")),
+			absolute_minute,
+			"The finite Mana reserve could not settle this boundary.",
+			{&"mana": int(_state.get_resource(&"mana"))}
+		)
+		return
+	if bool(reserve_flow.get(&"processed", false)):
+		_state.set_resource(&"mana", int(reserve_flow[&"after"]))
 	var report := mana_network_service.advance_one_minute(absolute_minute)
 	# Finite reserve is an additional gate, even between network evaluations and
 	# for zero-demand facilities. The network remains the local supply authority.
 	preload("res://scripts/mana/mana_power_projection.gd").apply(
 		facility_service, mana_network_service, int(_state.get_resource(&"mana")), absolute_minute
 	)
+	var warp_sync := _synchronize_warps()
+	if not bool(warp_sync.get(&"ok", false)):
+		_latch_infrastructure_failure(&"WARP_SYNC_FAILED", absolute_minute,
+			"Warp connectors could not follow the current power state.", warp_sync)
+		return
 	for change: Dictionary in report.get(&"state_changes", []):
 		var consumer_id := StringName(change.get(&"consumer_id", ""))
 		_publish_domain_event(SimulationDomainEvent.new(
@@ -11868,6 +12217,12 @@ func _apply_service_transaction(
 	if service.price_snapshot > 0:
 		var payer_account := _guest_wallet_account(request.guest_ids[0])
 		var revenue_account := _facility_revenue_account(facility.instance_id)
+		# Only a registered definition with a hidden-service tag routes the sale to the
+		# hidden fund. A facility whose definition cannot be read keeps the existing
+		# front-fund behaviour (disclosed in execution/p05-02/REPAIR_02.md).
+		var sale_definition := definition_registry.get_facility(facility.definition_id)
+		var sale_fund := FinancePolicy.BACK_CASH \
+			if sale_definition != null and FinancePolicy.is_back_fund_service(sale_definition.tags) else PLAYER_CASH_ACCOUNT
 		if not economy_service.has_account(payer_account) or not economy_service.has_account(revenue_account):
 			inventory_service.restore_snapshot(inventory_before)
 			return CommandResult.failed(CommandResult.Code.NOT_FOUND, 0, "A service settlement account is missing.")
@@ -11877,7 +12232,7 @@ func _apply_service_transaction(
 				service.price_snapshot, &"SERVICE_SALE", facility.instance_id
 			),
 			LedgerEntry.new().configure(
-				&"", absolute_minute, PLAYER_CASH_ACCOUNT, revenue_account,
+				&"", absolute_minute, sale_fund, revenue_account,
 				service.price_snapshot, &"SERVICE_CASH_SWEEP", facility.instance_id
 			),
 		]
@@ -12065,6 +12420,8 @@ func _on_guest_despawned(guest_id: StringName, persistent_record: Dictionary) ->
 	elevators.cancel_actor(actor_id)
 	var path_removed := path_service.despawn_actor(actor_id)
 	_movement_credits.erase(actor_id)
+	# A13: a rain hold describes a present guest, so it leaves with the guest.
+	weather.release_rain_hold(guest_id)
 	_synchronize_operations_population()
 	var payload := persistent_record.duplicate(true)
 	payload[&"path_actor_id"] = actor_id
@@ -12754,7 +13111,8 @@ func advance_staff_commute(staff_id: StringName, target_cell: Vector3i, minute:
 	var required_credit := _step_movement_credit(path_service, path[0], path[1], [&"staff"])
 	var credit := _movement_credit_after_one_minute(actor_id, staff.current_cell, minute)
 	credit = mini(credit, required_credit + MOVEMENT_CREDIT_SCALE - 1)
-	if credit < required_credit:
+	var commute_warp := _warp_step_connector(path[0], path[1], [&"staff"])
+	if credit < required_credit or not _warp_fare_affordable(commute_warp, 1):
 		_record_expected_actor_wait(actor_id, staff.current_cell, minute)
 		_movement_credits[actor_id] = {&"credit": credit, &"updated_at": minute}
 		return {&"ok": true, &"moved": false}
@@ -12763,6 +13121,7 @@ func advance_staff_commute(staff_id: StringName, target_cell: Vector3i, minute:
 		_report_path_integration_failure(actor_id, staff_id, &"staff", previous)
 		return {&"ok": false}
 	staff.current_cell = path[1]
+	_charge_warp_fare(commute_warp, [actor_id], previous, staff.current_cell)
 	_movement_credits[actor_id] = {&"credit": credit - required_credit, &"updated_at": minute}
 	_publish_actor_event(&"STAFF_MOVED", &"staff_commute", [staff_id, actor_id], {
 		&"path_actor_id": actor_id, &"from_cell": previous, &"cell": staff.current_cell,
@@ -12846,6 +13205,42 @@ func _execute_set_elevator_operation(command: SimulationCommand) -> CommandResul
 	return CommandResult.succeeded(command.command_id, {&"shaft_id": shaft_id, &"operator_open": open_value})
 
 
+## A07: warp connectors exist for every completed warp pair and are usable only
+## while both warps are powered and the reserve can pay one fare.
+func _synchronize_warps() -> Dictionary:
+	var available := {}
+	var reserve_ok := int(_state.get_resource(&"mana")) > 0
+	for warp: Dictionary in WarpService.warps_from_facilities(construction_service.get_facilities()):
+		var state := mana_network_service.get_consumer_state(warp[&"instance_id"])
+		available[warp[&"instance_id"]] = reserve_ok and state in [ManaNetworkService.ConsumerState.ACTIVE, ManaNetworkService.ConsumerState.DEGRADED]
+	return WarpService.synchronize(path_service, construction_service.get_facilities(), available,
+		int(_state.get_resource(&"mana")) >= WarpService.MANA_PER_TRIP)
+
+
+func _warp_step_connector(from: Vector3i, to: Vector3i, access: Array[StringName]) -> StringName:
+	var connector_id := path_service.get_step_connector(from, to, access)
+	return connector_id if WarpService.is_warp_connector(connector_id) else &""
+
+
+func _warp_fare_affordable(connector_id: StringName, riders: int) -> bool:
+	return connector_id.is_empty() or int(_state.get_resource(&"mana")) >= WarpService.MANA_PER_TRIP * riders
+
+
+## Charged once, in the same tick as the committed step; affordability was
+## checked before the step, so the deduction cannot fail here.
+func _charge_warp_fare(connector_id: StringName, actor_ids: Array, from: Vector3i, to: Vector3i) -> void:
+	if connector_id.is_empty():
+		return
+	var fare := WarpService.MANA_PER_TRIP * actor_ids.size()
+	_state.apply_resource_deltas({&"mana": -fare})
+	var subjects: Array[StringName] = [connector_id]
+	for actor_id: Variant in actor_ids:
+		subjects.append(StringName(actor_id))
+	_publish_actor_event(&"WARP_TRAVELED", &"warp", subjects, {
+		&"connector_id": connector_id, &"from_cell": from, &"cell": to,
+		&"riders": actor_ids.size(), &"mana": fare})
+
+
 func _synchronize_elevators(minute: int) -> Dictionary:
 	return elevators.synchronize(ElevatorService.configurations_from_facilities(
 		construction_service.get_facilities(), definition_registry), minute)
@@ -13207,10 +13602,66 @@ func get_staff_rest_report(staff_id: StringName) -> Dictionary:
 
 func _advance_weather(absolute_minute: int) -> void:
 	weather.advance_to(absolute_minute)
+	_draw_natural_weather_if_due(absolute_minute)
+	if not weather.get_rain_holds().is_empty():
+		var present := {}
+		for guest: GuestRuntime in guest_service.get_guests():
+			present[guest.guest_id] = true
+		weather.prune_rain_holds(present)
+
+
+## A13: one draw per day at 06:00 from the saved weather stream. The weather
+## boundary runs first, so the same minute's arrivals and closes see the result.
+func _draw_natural_weather_if_due(absolute_minute: int) -> void:
+	if not NaturalWeather.is_draw_minute(absolute_minute) or weather.get_minute() != absolute_minute:
+		return
+	var day := NaturalWeather.day_of(absolute_minute)
+	var stream := get_rng_stream(&"weather")
+	if day <= weather.get_last_draw_day() or stream == null:
+		return
+	var draw := NaturalWeather.draw(stream, day)
+	var applied := weather.apply_draw(draw)
+	var no_entities: Array[StringName] = []
+	_publish_actor_event(&"WEATHER_FORECAST_DRAWN", &"weather", no_entities, {
+		&"day": day,
+		&"kind": String(draw[&"kind"]),
+		&"roll": int(draw[&"roll"]),
+		&"slot": int(draw[&"slot"]),
+		&"start": int(draw[&"start"]),
+		&"end": int(draw[&"end"]),
+		&"applied": bool(applied.get(&"ok", false)),
+		&"code": String(applied.get(&"code", &"")),
+	})
+
+
+## A13: a guest due to leave while it rains stays until the rain ends, at most
+## 240 minutes after the original plan, once per guest (SPEC section 4.3).
+func _hold_guest_for_rain(guest: GuestRuntime, absolute_minute: int) -> bool:
+	if weather.get_kind() != &"rain" or not weather.get_rain_hold(guest.guest_id).is_empty():
+		return false
+	var original := guest.planned_exit_at
+	var extended := original + NaturalWeather.RAIN_HOLD_MAX_MINUTES
+	var rain_end := weather.rain_end_minute()
+	if rain_end >= 0:
+		extended = mini(extended, rain_end)
+	if extended <= absolute_minute or not weather.add_rain_hold(guest.guest_id, original, extended):
+		return false
+	guest.planned_exit_at = extended
+	return true
 
 
 func get_weather_report() -> Dictionary:
-	return {&"kind": weather.get_kind(), &"minute": weather.get_minute()}
+	var kind := weather.get_kind()
+	return {
+		&"kind": kind,
+		&"minute": weather.get_minute(),
+		&"since": weather.get_since(),
+		&"next_change": weather.next_change(),
+		&"today_draw": weather.get_today_draw(),
+		&"effect_text": NaturalWeather.effect_text(kind),
+		&"arrival_percent": NaturalWeather.arrival_percent(kind),
+		&"rain_holds": weather.get_rain_holds().size(),
+	}
 
 
 ## Read-only migration preview; applying dimensions remains a separate transaction.

data/facilities/infrastructure/mana_warp.tres

@@ -0,0 +1,27 @@
+[gd_resource type="Resource" script_class="FacilityDefinition" load_steps=2 format=3]
+
+[ext_resource type="Script" path="res://scripts/data/facility_definition.gd" id="1"]
+
+[resource]
+script = ExtResource("1")
+id = &"mana_warp"
+display_name = "マナワープ"
+description = "建設済みの表層ワープ同士を瞬時につなぐ客用の転移陣。客が1回3マナで移動する。従業員は裏層の業務用ワープを使う。"
+zone = 0
+layer = 0
+footprint = Vector2i(2, 2)
+construction_cost = {&"gold": 3000, &"materials": 30}
+build_minutes = 360
+weight_per_cell = 3
+pass_through = true
+maintenance_gold = 15
+maintenance_mana = 1
+power_priority = 80
+staff_min = 0
+staff_max = 0
+capacity = 4
+queue_capacity = 0
+base_service_minutes = 1
+base_quality = 50
+base_price = 0
+tags = Array[StringName]([&"guest_access", &"movement", &"schema_facility_proxy", &"warp"])

data/facilities/infrastructure/service_warp.tres

@@ -0,0 +1,27 @@
+[gd_resource type="Resource" script_class="FacilityDefinition" load_steps=2 format=3]
+
+[ext_resource type="Script" path="res://scripts/data/facility_definition.gd" id="1"]
+
+[resource]
+script = ExtResource("1")
+id = &"service_warp"
+display_name = "業務用マナワープ"
+description = "建設済みの業務用ワープ同士を瞬時につなぐ裏層の転移陣。従業員が1回3マナで移動する。"
+zone = 0
+layer = 1
+footprint = Vector2i(2, 2)
+construction_cost = {&"gold": 3000, &"materials": 30}
+build_minutes = 360
+weight_per_cell = 3
+pass_through = true
+maintenance_gold = 15
+maintenance_mana = 1
+power_priority = 80
+staff_min = 0
+staff_max = 0
+capacity = 4
+queue_capacity = 0
+base_service_minutes = 1
+base_quality = 50
+base_price = 0
+tags = Array[StringName]([&"movement", &"schema_facility_proxy", &"staff_only", &"warp"])

docs/plans/original-completion-2026-10-02/IMPLEMENTATION_PLAN.md

@@ -1,3 +1,56 @@
+## 現在の対象（2026-10-20・正式22成果／P14-03正式完了、P14パッケージ完了）
+
+元30パッケージ・88成果単位で、部分点はありません。正式完了は22成果、完了パッケージは4（P00、P04、P06、P14）です。
+
+**P14-03「混雑と経路選択」は Runner で正式完了しました。**
+- Runner の実receipt: 提出 `a5d2491`、統合・final `b7f6168`、main-base `e8b3dbe`。登録9条件すべて完了、high/medium/critical の指摘は0です。
+- 受入記録は `execution/p14-03-route-wait/ACCEPTANCE.json` です。条件表と、結合した証拠（正式全回帰192/192、Root別PID pair 5/5、代表性能r02、独立Opusレビュー PASS）を記載しています。
+- これで P14-01・02・03 の3成果がそろい、P14パッケージが完了しました。
+
+**解消扱いしない別の未達**（P14の完了に含めません）
+- Runner review の low 4件
+- x1 1分tick は平均約827 msで、4 ms の予算に届いていません
+- x3 frame、stall、描画は未測定、Windows は未検証です
+- 代表負荷で、実際の職員が業務用shaftを使う場面は実施していません
+
+**過去の回帰範囲の補足**: 46 suite の件は P14-03 の受入記録と各単位の訂正注記に残しました。p06-01・p14-02 の pinned ACCEPTANCE.json は改変していません。
+
+**次の対象**: P28-01「現HEADの性能基準」です。現sourceの r02 実測（headless・Operations OFF・x1）を再利用し、windowed描画・x3・Operations ON と記録項目の不足分だけを埋めます。
+
+## 現在の対象（2026-10-20・正式21成果／P14-03はRunnerゲート待ち）
+
+元30パッケージ・88成果単位で、部分点はありません。正式完了は21成果、完了パッケージは3（P00、P04、P06）です。
+- 2026-10-19 以降に正式完了したもの: P06-01、P06-03、P14-02、P06-02。いずれも、ユーザーが承認判断を委任した体制で、独立Opusレビューの合格を受けて記録しました。
+- 承認済みの決定: A06（有限マナ）、A07（客用マナワープ）、A08（裏層の業務用ワープ）。
+
+**P14-03「混雑と経路選択」**
+- 正確候補は `83b170a` です。次の証拠がそろっています。
+  - 正式全回帰: 192/192 suite、22,198 checks、失敗0
+  - Root の別PID pair: 5/5、10 PID
+  - 代表性能 r02: 収集と機能検証は合格し、版間の比較が成立
+  - 独立Opusの whole-unit レビュー: PASS
+- ただし skill 契約では、完了を確定するのは Runner です（試験・独立レビュー・最新mainとの統合・最終試験）。そのため Runner の正式ゲートが終わるまで加算0です。登録案と、既存証拠を結合する検証器は `artifacts/original-completion-2026-10-02/p14-03-runner-gate-r01/` にあります。
+
+**未達として明記している性能**
+- 代表負荷での1分 tick は平均約827 ms で、x1 の予算 4 ms を両版とも大きく超えています。
+- x3 frame、stall、描画、Windows は未測定です。
+
+**過去の回帰の訂正**: P06-01・P06-03・P14-02・P06-02 当時の回帰は Makefile 経由で、roster にしか載っていない46 suite を含んでいませんでした。その46 suite で見つかった回帰（v15保存の拒否など）は `83b170a` で修正済みで、正式192 suite の実行で全件合格を確認しました。各単位の完了記録には訂正注記を付けています。
+
+**次の候補**: P28-01「現HEADの性能基準」です。描画とx3はheadlessの結果で代用せず、新たに測定します。P05-02・P22-03（仕様が未承認）とP02-03（Windows実機待ち）は保留ですが、作業全体は止めません。
+
+以下の「現在」は各記録時点の履歴です。上記と現在の台帳を優先してください。
+
+## 現在の対象（2026-10-19・P04-01正式完了／開発体制更新）
+
+P04-01「同時発生の更新規約」は通常候補 `b1810ff4b2809018fe7434be7bdcf6f6411c91f4` で全条件・独立Opusレビュー・統合・最終検証を完了。元30パッケージ／88成果、部分点なしで正式17成果、完了2パッケージ。詳細は[正式受入証拠](../../../artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ACCEPTANCE.json)と `work_packages.json` / `progress_snapshot.json` を参照。
+
+2026-10-19のユーザー指定チャットで更新された体制を継承：Opus 5.5が判断と独立レビュー、範囲の明確な実装はOpenCode無料DeepSeek、複雑な実装はCodex Astra、quota限定でAntigravity Opus 5.5 Highへ切替。修正回数無制限、有料API自動切替なし。既存契約・成果・履歴を保持し、通常の試験と状態遷移はRunnerが実行する。
+
+次の対象は実Opus判断でP06-02「全館停止の統合」。P05-02は未確定の税・利息・資金規約を保持して後順へ変更。P06-02-AUDITとして無料OpenCodeが7対象の停止判定と既存3証拠の現版適用を監査中。製品変更なし、監査で原88へ加点しない。同一Windows配布版・全内容・完成素材・通しプレイなど全ゲーム残件は未達のまま。
+
+以下の「現在」は各記録時点の履歴。上記および現台帳を優先する。
+
 ## 現在の対象（2026-10-15・P13-03正式完了）
 
 P13-03「内容差異の記録」を正式完了。提出bd3a97e、原8条件を別Opusレビュー、実統合/最終e80c6c0で確認。全7施設/84利用枠/6分類、33拒否+代替正常系、固定原30/88・部分点なし。記録1件のみ、内容/素材/P13パッケージ/原子/ゲーム完成の加点0。P13-01/02とD08/D09・未制作内容は未完了。 正式13/着手24/予定51、30パッケージ/88成果。[全条件閉鎖証拠](execution/p13-03-resume-20261015/ACCEPTANCE_CLOSED_E80C6C0.json)。次に閉じる候補は実Opus判断でP23-03、通常OSが実ロック中のため重複起動せず、代替指示の同一P18-01保存互換修正を先行。原P18-01の全条件と未承認初期値を保持し、backendのみで完了扱いしない。[現在と次の受入条件](execution/p18-01-resume-20261015/CURRENT_ACCEPTANCE_AUDIT.json)。以下は各記録時点の履歴。
@@ -2149,3 +2202,12 @@ r11に別PIDnarrowを再実行したという記録は作らず、r10の278件
 [限定45観点の宣言](../../../artifacts/original-completion-2026-10-02/kitchen-p20-atomic-registry-view-update-candidate-r02/limited-view-manifest.json)と旧台帳の全JSONを照合し、宣言したview_resultsだけを変える。指定原本条件7件、厨房BACKと4×2の定義2件をpassとし、通常UI/Runtime/保存等の限定観測はpartialに留める。厨房125はgeometryの観測記録数で、assertion 820件とは別である。Restaurant/酒場のモデル観測を全営業受入へ読み替えず、artifact名P20の通知ログを章・図鑑P20へ加点しない。
 
 既知1291機能＋工程18のIDと不変freeze、最終分母と総合割合null、work_packagesの完了1/着手中18/予定69、package完了1/着手中25/予定4は変えない。既存の「全8観点unverified」はそれぞれの証拠時点の履歴として残す。今回の視点更新を全施設・全人物・全ルート/エンド・図鑑・完成資産・Windows実機の受入へ転用しない。
+
+
+### P04-01 正式受入更新（2026-10-19T00:54:23.322453+09:00）
+
+同時発生の更新規約P04-01は、通常統合候補 `b1810ff4b2809018fe7434be7bdcf6f6411c91f4` で元の7領域と15条件＋EVを正式受入した。提出 `785815002eb750b0bef3c26fe2ca492b16b280be` の登録検証、別セッションOpus 5.5の全条件レビュー、候補のintegration/final、実main・実DB・対象ソースの照合を完了した。証拠は [正式受入記録](../../../artifacts/original-completion-2026-10-02/p04-01-formal-closure-b1810ff4/ACCEPTANCE.json) と同フォルダの受入条件表・実ゲート記録を参照する。
+
+元30パッケージ／88成果・部分点なしを維持し、正式完了は17／88。P04全3成果が完了した。試験件数は成果数へ換算していない。全184回帰と補助検証は旧実行版を保持し、現版への適用条件を独立確認して再利用した。低優先度の文書表記と連続発生時の理由表示解釈は残件として保存し、全ゲーム・同一Windows配布版・性能・完成素材等の原受入へ転用しない。
+
+次の監査候補はP05-02「全費目と資金区分」。現版の不足条件・既存証拠・D04等の依存を実Opusが評価して正式選定する。現在の新規実装起動は0。旧台帳の14件リストを実際に完了済みのP19-03/P26-01を含む現17件へ整合させた。

docs/plans/original-completion-2026-10-02/checkpoints/p06-02-audit-contract-r01.json

@@ -0,0 +1,55 @@
+{
+  "scope": "Audit preparation only; original88 completion credit0; preserved original text follows",
+  "source_authority": "docs/plans/original-completion-2026-10-02/work_packages.json",
+  "source_commit": "d9262a71f45b39c53115a4878f4c6a2c861dfac5",
+  "original_unit": {
+    "id": "P06-02",
+    "title": "全館停止の統合",
+    "work": "利用中、EV、ワープ、物流、救護、清掃、入館へ同じ停止判定を接続する。",
+    "acceptance": "停電中の無条件売上・生産がなく、乗客と搬送対象が消えない。",
+    "state": "in_progress",
+    "evidence": [
+      {
+        "path": "artifacts/original-completion-2026-10-02/p06-rescue-power-final-root-review-r01.json",
+        "sha256_at_integration": "04e16364985a4a1e795b38e187830aee9d944e8c9fb3cb4200bb0d7f3a594436",
+        "scope": "Controlled held boarded EV/rescue outage Runtime14 save pair691/0,10 complete typed states,uncapped9events,formal4immutable; emergency alighting/natural outage/UI/native pending",
+        "linked_at_jst": "2026-10-02T07:25:10.042304+09:00",
+        "current_game_acceptance_inferred": false
+      },
+      {
+        "path": "artifacts/original-completion-2026-10-02/p06-current-supply-outage-root-review-r01/review.json",
+        "sha256_at_integration": "771078fabaea725cc7d115f51f6333be2dd8991097a69b16417aacb30817d8c5",
+        "scope": "Current1299 controlled cargo and real active kitchen batch stop/recovery;460/0,16 whole typed,8 exact cross-PID pairs,2 formal8 members. Natural depletion, active guest service, whole P06 and OS pending",
+        "linked_at_jst": "2026-10-09T10:37:43.610273+09:00",
+        "current_game_acceptance_inferred": false
+      },
+      {
+        "path": "artifacts/original-completion-2026-10-02/p06-active-service-outage-root-review-r01/review.json",
+        "sha256_at_integration": "45a8f2015a7191629e6fb9842abc242548e1611d55cec009d3e7981f1a82dea0",
+        "scope": "Current1299 naturally admitted active meal/lodging services with controlled reserve;1906/0,28 whole typed,14 exact cross-PID pairs,2 formal8 members;existing RAIDED safe failure verified. Natural depletion,whole P06 and OS pending",
+        "linked_at_jst": "2026-10-09T10:46:38.784861+09:00",
+        "current_game_acceptance_inferred": false
+      }
+    ],
+    "progress_summary": " 制御したEV乗車中救護の停電保存/再開691/0・10全状態pair・無制限journal各9件を限定照合。安全階での緊急降車・自然停電・全館停止・通常UIは未受入。 現版物流/厨房の制御枯渇と復旧の別PID正式保存を460/0で限定照合。 現版食事/宿泊2種の制御枯渇と復旧、一回請求、既存摘発休止の境界を別PID正式保存で1906/0照合。",
+    "updated_at_jst": "2026-10-09T10:46:38.784861+09:00"
+  },
+  "cross_cutting_acceptance": [
+    "原本条件とUI操作が一致",
+    "Runtimeの実利用・会計・行動へ接続",
+    "途中保存・再起動で再現",
+    "異常/境界/中断を検証",
+    "関連回帰PASS",
+    "要件別ログとソースハッシュを保存",
+    "既存代表負荷の性能回帰を計測"
+  ],
+  "cross_cutting_acceptance_scope": "Completion requirements only, not achieved results. Apply each to relevant slices; non-applicable views require a recorded reason.",
+  "audit_conditions": [
+    "現版7対象の停止判定をソース行/関数/SHAと共に示す",
+    "既存3証拠の適用性を版と生証拠に基づき判定、不足は不足と記録",
+    "製品変更なし・原88加算0"
+  ],
+  "task_instructions": "# P06-02 current audit task (not unit completion)\n\nActual Opus commander selected P06-02 after P04 completion. Audit only; do not edit product, rules, values or existing tests. Source base d9262a71f45b39c53115a4878f4c6a2c861dfac5. Original 30/88, completed17; this audit adds zero. Read current work_packages P06-02 and P04 order-audit. Read build/p06-history for exact copied historical review records. No source/test implementation is requested.\n\nWrite current-audit.json and CURRENT_AUDIT.md in this directory. JSON schema:\nsource_commit: exact base above; unit_accepted:false; domains: exactly seven objects with domain in active_service,elevator,warp,logistics,rescue,cleaning,admission. Each includes status (implemented_unverified/partial/missing/verified), source_refs [{path: repository-relative file,sha256: actual SHA256,line/function evidence}], remaining_conditions (nonempty array), stop_condition, call_order, save_restart_evidence. Cite actual source, distinguish missing implementation from missing proof. Never mark verified from code alone. A missing domain still cites source inspected to establish absence, not an invented filename.\n\nhistorical_evidence: exactly three entries for the supplied rescue-power, supply-outage, active-service-outage reviews; each includes reusable:boolean, basis: factual explanation, prior_source_pins, current_differences, raw_evidence_available. Unavailable historical raw/source maps mean reuse not established. Inspect nested paths and available tracked evidence; do not infer unchanged runtime from only review text. Sources have changed since old1299; expected reuse may be false. Make no gameplay execution claims. Include dependencies, unresolved_policy, recommended_next_batch and exact relevant test paths/argv from repository (do not invent runnable commands).\n\nOriginal scope: all seven domains stop consistently, no unconditional sales/production in outage, no lost passengers/cargo. Preserve P14 warp dependency and unapproved mana settings. Identify cleaning/admission/emergency alighting/natural outage gaps. Root provides historical receipts in build only; do not commit copied build inputs. No full regression/native engines in this audit. Runner handles registered structure validation; independent Opus reviews content separately. Do not run git commit; Runner submits.\n",
+  "historical_failure": "P06-02-AUDIT run2faabaca67d24dfa8df9e8f2543fba0a compaction.failed; no product implementation; retain failed run; do not restart old task",
+  "reference_p06_01_current_summary": "停電、厨房、救護の停止復帰は部分実装。有限マナ供給の契約が残る。 制御したEV乗車中救護の停電保存/再開691/0・10全状態pair・無制限journal各9件を限定照合。安全階での緊急降車・自然停電・全館停止・通常UIは未受入。 最新現1299参照で通常建設からの物流/厨房の制御停電・復旧、2正式保存/別PID全状態一致を460/0で限定受入。利用中サービス0件なので途中販売/中断は未受入。全P06未完。 現版の自然入館客の食事/宿泊の制御停電・復旧・一回請求、既存RAIDED休止時の安全終了と正式保存別PID全状態一致を1906/0で限定受入。再開の不具合仮説は反証、ゲーム変更0。全P06未完。 2026-10-12: 旧限定停電証拠から現Runtime等13sourceが変化しており現受入へ自動適用しない。P06-01の原契約監査をRunner経由で開始。正式完了なし。 MP-01-r02承認用資料は追加許可後に同じSol担当で修正し、提出6b78f8fd・正式検証・別Opus5.5独立review PASS・最新main統合/最終検証65a4fe2bを完了。修正2/2保持。全37需要・53source pin・21候補比較・炉の容量判定・旧0/再送/D05を整理。数値/人物分類/更新順序/保存移行は未承認、製品未反映。P06-01はin_progress、原88正式完了増加0。"
+}

docs/plans/original-completion-2026-10-02/decisions.json

@@ -33,6 +33,97 @@
       "decision": "2×1・裏層。建築350G、資材4、工期60分、清掃員最低1人／上限2人、顧客0人・利用料なし、維持費2G／日。清潔0〜100・初期100、75以下で予約、現地8分で25回復。定義済み汚れ量を使い未定義値を補完しない。",
       "origin": "user_reply",
       "reference": "../original-completion-2026-09-29/execution/CLEANING_APPROVED_FOUNDATION.md"
+    },
+    {
+      "id": "A06",
+      "title": "マナ有限残量契約（MP-01-r02推薦案）",
+      "decision": "初期100・容量300・世界樹生成20／ゲーム内10分。10分境界ごとにB+G+F−Dを計算し、需要を先に支払い、超過は明示破棄、0で全館停止。需要は保有施設のmaintenance_mana合計（閉店・停止中も計上、撤去・破壊済みは除外）。境界間に返却等で容量を超えた分は次の境界でoverflowとして記録・破棄。炉の投入は自然生成と需要支払後のbase_after=min(C,max(0,B+G−D))で空き100以上のとき受理。現Runtimeのphase順序を保持しMANA内で処理。受入契約なしの旧セーブの残量は0〜300のみ保持し、超過・不正値は拒否。炉の人物適格性・収率の実接続は別承認。",
+      "origin": "user_reply_in_conversation",
+      "approved_at_jst": "2026-10-19",
+      "reference": "execution/mana-proposal/PROPOSAL.md"
+    },
+    {
+      "id": "A07",
+      "title": "マナワープの初期値（推薦案）",
+      "decision": "2x2・表層。建設3000G・資材30、工期360分、維持費15G／日、維持マナ1／10分。建設済みワープは全て相互接続。利用者は客と接客中の従業員。1人1回3マナを出発時に一回だけ差し引く。残量不足・停電・到着先不可のときは経路から除外し、費用と移動を発生させない。途中保存・再開で費用と移動を二重反映しない。",
+      "origin": "user_reply_in_conversation",
+      "approved_at_jst": "2026-10-20"
+    },
+    {
+      "id": "A08",
+      "title": "ワープの客用・業務用分離",
+      "decision": "表層のマナワープは客用とし、従業員の経路からは使わない。従業員用に裏層の業務用マナワープ（2x2・裏層）を別に設け、業務用同士だけを相互接続し従業員のみ利用する。業務用の建設費・工期・維持費・維持マナ・1人3マナの運賃はA07と同値。",
+      "origin": "user_reply_in_conversation「従業員用を裏層に別で作って」",
+      "approved_at_jst": "2026-10-20",
+      "values_note": "業務用の数値はユーザー指定がなくA07と同値を適用。"
+    },
+    {
+      "id": "A09",
+      "title": "費用の支払元",
+      "decision": "維持費・仕入れ・人件費・返済・利息・税は表金から払い、不足を裏金で補う。",
+      "origin": "user_selected_answer_label_verified_in_claude_desktop",
+      "approved_at_jst": "2026-10-23",
+      "selected_label": "Front, hidden fills gap (Recommended)",
+      "reference": "execution/p05-02/SPEC.md",
+      "provenance_reference": "execution/p05-02/PROVENANCE.json",
+      "implementation_note": "日次義務の不足は滞納繰越、資金不足の操作時仕入れ/返済は拒否する区別は、既存挙動とOpusの解釈。全費目の繰越を追加の人間承認とは主張しない。SPEC §3.3。"
+    },
+    {
+      "id": "A10",
+      "title": "世界樹ランク税の初期試験値",
+      "decision": "世界樹ランク税は、その日の売上の10%。初期試験値として適用する。",
+      "origin": "user_selected_answer_label_verified_in_claude_desktop",
+      "approved_at_jst": "2026-10-23",
+      "selected_label": "10% of daily sales (Recommended)",
+      "reference": "execution/p05-02/SPEC.md",
+      "provenance_reference": "execution/p05-02/PROVENANCE.json",
+      "implementation_note": "表裏売上合計・00:00計上は提示された説明と原要件、整数切り捨てはOpusの仕様選択。SPEC §3.4。"
+    },
+    {
+      "id": "A11",
+      "title": "闇銀行利息の初期試験値",
+      "decision": "借入残高に対して日利1%。元本は売上に含めない。",
+      "origin": "user_selected_answer_label_verified_in_claude_desktop",
+      "approved_at_jst": "2026-10-23",
+      "selected_label": "1% per day on balance (Recommended)",
+      "reference": "execution/p05-02/SPEC.md",
+      "provenance_reference": "execution/p05-02/PROVENANCE.json",
+      "implementation_note": "00:00計上と整数切り捨てはOpusが記録した選択肢説明。Rootが直接確認したのは質問と選択ラベル。SPEC §3.5。"
+    },
+    {
+      "id": "A12",
+      "title": "旧セーブの資金区分移行",
+      "decision": "旧セーブの所持金は全額を表金とし、裏金は0から始める。",
+      "origin": "user_selected_answer_label_verified_in_claude_desktop",
+      "approved_at_jst": "2026-10-23",
+      "selected_label": "All to front funds (Recommended)",
+      "reference": "execution/p05-02/SPEC.md",
+      "provenance_reference": "execution/p05-02/PROVENANCE.json",
+      "implementation_note": "帳簿履歴を保持。口座欠如による移行判定と5空口座追加はOpusの実装仕様。F8は他の帳簿フィールドbyte不変を必須とする。SPEC §3.8。"
+    },
+    {
+      "id": "A13",
+      "title": "天候の初期仕様",
+      "decision": "毎朝6時に晴れ60%・雨25%・マナ霧10%・嵐5%で抽選し、雨6時間・霧4時間・嵐2時間の後は晴れ（開始は6〜20時の30分刻み）。雨の間は新規来客を半分にし、帰宅予定の客は雨が止むまで滞在を延長（最大4時間）。マナ霧の魔法効率上昇は世界樹・マナ炉の産出1.2倍、興奮度上昇は成人確認済みの客の性欲の増加1.5倍。",
+      "origin": "user_answer_recorded_by_root_in_codex_conversation",
+      "approved_at_jst": null,
+      "answer_verbatim": "この初期仕様で進める",
+      "reference": "execution/p07-01/SPEC.md",
+      "provenance_reference": "execution/p07-01/PROVENANCE.json",
+      "implementation_note": "切り捨て・抽選の手順・保存される系列 weather・延長の記録・旧セーブの移行・拒否の規則は実装担当の選択で、人の新しい承認としない。SPEC §2・§4・§5。",
+      "recorded_at_utc": "2026-10-23T18:07:36Z (Root record time; the answer time is not recorded)"
+    },
+    {
+      "id": "A14",
+      "title": "一般従業員の解雇の退職金",
+      "decision": "退職金はその職員の日給の3日分。表金から払い、不足分を裏金で補い、合計でも足りなければ解雇しない。未払い給与は退職金と分けて保持し次の午前0時に精算する。退職金は帳簿で区別し、日次決算では運営費に計上する。",
+      "origin": "user_answer_recorded_by_root_in_codex_conversation",
+      "approved_at_jst": null,
+      "answer_verbatim": "この初期仕様で進める",
+      "reference": "execution/p16-01-dismiss/SPEC.md",
+      "provenance_reference": "execution/p16-01-dismiss/PROVENANCE.json",
+      "implementation_note": "日給×3の整数、補填と退職金の1つの取引、区分 STAFF_SEVERANCE と口座、旧セーブへの空の口座の追加、命令ごとに1回の記帳は実装担当の選択。進行中の襲撃の防衛者の扱い（R9）は Root の一時の境界で人の承認ではない。SPEC §3.5・§3.6・§6.3。",
+      "recorded_at_utc": "2026-10-23T18:07:36Z (Root record time; the answer time is not recorded)"
     }
   ],
   "pending": [
@@ -63,7 +154,7 @@
     {
       "id": "D04",
       "title": "未指定の経済と行動係数",
-      "details": "税・利息・マナ・天候・環境・役割・成長等の必須値。A01〜A05は決定済み。",
+      "details": "税・利息・マナ・天候・環境・役割・成長等の必須値のうち未確定部分。A01〜A14の決定範囲はconfirmedと各仕様を参照。A10・A11は初期試験値であり、その他の未確定値を補完しない。",
       "needed_at": "各機能の本番値固定",
       "independent_work": "原本明示値、契約、候補比較を先行する。",
       "kind": "required_per_feature"

docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json

@@ -3723,8 +3723,8 @@
         "path": "docs/spec/acceptance/P08-03.json",
         "scope": "normal placement; native and OS pending"
       }
-    }
-    ,{
+    },
+    {
       "test": "tests/ui/test_p23_life_observation.gd",
       "template": "P23 life observation: <checks> checks, <failures> failures",
       "required": true,
@@ -3789,6 +3789,208 @@
         "path": "docs/plans/original-completion-2026-10-02/execution/p13-02/CODE1_TASK_SPEC.json",
         "scope": "new backend suite marker; native execution pending"
       }
+    },
+    {
+      "test": "tests/mvp/test_whole_tower_outage.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "dd786e8c7448eeb77d51d7effd9100059ae6febf638ca2c20f3a55683009c9ea",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p14-03-route-wait/EVIDENCE_MATRIX.md",
+        "scope": "Claude session 2026-10-20: new suite added with P06/P14 work; exact label/schema only, check count is not an expected future value"
+      },
+      "source_marker_lines": [
+        {
+          "line": 41,
+          "text": "\tprint(\"%s: %d checks\" % [\"PASS\" if _failures == 0 else \"FAIL\", _checks])"
+        }
+      ]
+    },
+    {
+      "test": "tests/s2/test_mana_recovery_new_pid.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "8ef67859db2a31213585fa49dfc687ea69bf215c41c8d1d8cbb3f84d00dd5d17",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p14-03-route-wait/EVIDENCE_MATRIX.md",
+        "scope": "Claude session 2026-10-20: new suite added with P06/P14 work; exact label/schema only, check count is not an expected future value"
+      },
+      "source_marker_lines": [
+        {
+          "line": 26,
+          "text": "\tprint(\"%s: %d checks\" % [\"PASS\" if _failures == 0 else \"FAIL\", _checks])"
+        }
+      ]
+    },
+    {
+      "test": "tests/s2/test_mana_reserve_cycle.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "048d79e067cc85eef1c5c5f3e412198e652a2acc08e6d910e0761c7148a34cb6",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p14-03-route-wait/EVIDENCE_MATRIX.md",
+        "scope": "Claude session 2026-10-20: new suite added with P06/P14 work; exact label/schema only, check count is not an expected future value"
+      },
+      "source_marker_lines": [
+        {
+          "line": 64,
+          "text": "\tprint(\"%s: %d checks\" % [\"PASS\" if failures == 0 else \"FAIL\", checks])"
+        }
+      ]
+    },
+    {
+      "test": "tests/s2/test_mana_reserve_new_pid.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "9f42e4f7f5aac403ee4a6091e54ebf3995e25d11a450000e5a8ce870094f7a6b",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p14-03-route-wait/EVIDENCE_MATRIX.md",
+        "scope": "Claude session 2026-10-20: new suite added with P06/P14 work; exact label/schema only, check count is not an expected future value"
+      },
+      "source_marker_lines": [
+        {
+          "line": 26,
+          "text": "\tprint(\"%s: %d checks\" % [\"PASS\" if _failures == 0 else \"FAIL\", _checks])"
+        }
+      ]
+    },
+    {
+      "test": "tests/s2/test_runtime_mana_reserve.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "323750a533f2bbdf95b96b1615996cd3c4155bdadc6dcfb0936eaaa19a04809b",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p14-03-route-wait/EVIDENCE_MATRIX.md",
+        "scope": "Claude session 2026-10-20: new suite added with P06/P14 work; exact label/schema only, check count is not an expected future value"
+      },
+      "source_marker_lines": [
+        {
+          "line": 25,
+          "text": "\t\tprint(\"PASS: %d checks\" % _checks)"
+        }
+      ]
+    },
+    {
+      "test": "tests/transport/test_route_wait_choice.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "c4db1db2e60f1a24fbbcb6c2c3706a7ee1534c7191f612e1d8df40d0a39a97bc",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p14-03-route-wait/EVIDENCE_MATRIX.md",
+        "scope": "Claude session 2026-10-20: new suite added with P06/P14 work; exact label/schema only, check count is not an expected future value"
+      },
+      "source_marker_lines": [
+        {
+          "line": 49,
+          "text": "\tprint(\"%s: %d checks\" % [\"PASS\" if _failures == 0 else \"FAIL\", _checks])"
+        }
+      ]
+    },
+    {
+      "test": "tests/transport/test_runtime_warp.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "cfbb69e63aca12d9d198393fd853c76be63df95e8d1e777e7a14194dbd181234",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p14-03-route-wait/EVIDENCE_MATRIX.md",
+        "scope": "Claude session 2026-10-20: new suite added with P06/P14 work; exact label/schema only, check count is not an expected future value"
+      },
+      "source_marker_lines": [
+        {
+          "line": 40,
+          "text": "\tprint(\"%s: %d checks\" % [\"PASS\" if _failures == 0 else \"FAIL\", _checks])"
+        }
+      ]
+    },
+    {
+      "test": "tests/s2/test_new_pid_pairs.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "9742f9ac253067e6ae69a53faed054d71925f316d038ff7c5e480c3a9be91b04",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p14-03-route-wait/EVIDENCE_MATRIX.md",
+        "scope": "Claude session 2026-10-20: new-PID pair suite; exact label/schema only"
+      },
+      "source_marker_lines": [
+        {
+          "line": 45,
+          "text": "\tprint(\"%s: %d checks\" % [\"PASS\" if _failures == 0 else \"FAIL\", _checks])"
+        }
+      ]
+    },
+    {
+      "test": "tests/economy/test_p05_funds_runtime.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "4c8f929b0de76198182dfaaef4be4bea7961faa9c31c01889497d6675e0c5def",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p05-02/SPEC.md",
+        "scope": "new P05-02 suite marker; native execution pending"
+      }
+    },
+    {
+      "test": "tests/economy/test_p05_funds_restart_1_write.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "3b28e94f1a1f577d74c5322d532b32854339dd4731532ac0b21b4fbc7ffb12f3",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p05-02/SPEC.md",
+        "scope": "new P05-02 F6 restart writer marker; native execution pending"
+      }
+    },
+    {
+      "test": "tests/economy/test_p05_funds_restart_2_read.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "1b5bbf0f5c58df39ec28cc867c18a1a14d293fd36459343a118a3e97bc31d33a",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p05-02/SPEC.md",
+        "scope": "new P05-02 F6 restart reader marker; native execution pending"
+      }
+    },
+    {
+      "test": "tests/environment/test_p07_weather_runtime.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "e34b52ba3511f7391de1435c2f907997dd10235742ebc029831808af969c68e0",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p07-01/SPEC.md",
+        "scope": "new P07-01 suite marker; native execution pending"
+      }
+    },
+    {
+      "test": "tests/environment/test_p07_weather_restart_1_write.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "d85e56dcf75535b19b1af615f8b75e010f4f3906a0e71afdf97102e1bfbffc65",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p07-01/SPEC.md",
+        "scope": "new P07-01 F7 restart writer marker; native execution pending"
+      }
+    },
+    {
+      "test": "tests/environment/test_p07_weather_restart_2_read.gd",
+      "template": "PASS: <checks> checks",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "e5c2376e9cb3197d6a0a8d99c9dea020cad2648328178949cd188d999e72071a",
+      "authority": {
+        "path": "docs/plans/original-completion-2026-10-02/execution/p07-01/SPEC.md",
+        "scope": "new P07-01 F7 restart reader marker; native execution pending"
+      }
     }
   ],
   "unknown_roster_suite_policy": "refuse, explicitly review its source/schema before accepting",

docs/plans/original-completion-2026-10-02/execution/p04-01-owner-approval-20261018/ACTUAL_OPUS_NEXT_P04_PLAN.json

@@ -0,0 +1,7 @@
+{
+  "action": "wait",
+  "task_id": "P04-01",
+  "reason": "WAIT. The owner asked for planning only. No repair while the P26 doc repair is active. The repair counter stays at 29 and nothing new is dispatched. D05 is not open any more. The actual human approved all 4 remaining policies on 2026-10-18 (call_5fa8987f83284eb58b685002499cb9df), recorded in build/owner-handoff/d05-approved-20261018/D05_ACTUAL_HUMAN_APPROVAL.json. The approved rules are:\n- Command destruction is processed before completion. Accident or raid destruction is processed after completion and payment: that minute's sale stays valid, and the failure and reservation release happen in the next minute.\n- A sale that completes at 00:00 belongs to the new day. The previous day's settlement and upkeep are fixed before the completion.\n- When dependency closure and power loss coincide, the closure reason is shown. Both pause progress and charging and keep the reservation.\n- The exit command is processed before completion. An AI planned exit applies only to deciding guests and is processed after completion.\nThe earlier dependency-hold rule, the 18:00 shift order and the A01 upkeep rule stay unchanged.\n\nNext P04 repair plan, to be issued as one normal request-repair on the existing task (2dde759, repair 30) only after P26 closes. P04 is next in priority. No duplicate P13/P18/P23 worker.\n\n1) Decision record (allowed path execution/p04-01/**). Add D05_REMAINING_APPROVAL.json. It cites the handoff approval file by path and SHA256, quotes the 4 answers exactly, and gives each a stable ID: D05-P04-DESTRUCTION, D05-P04-MIDNIGHT-DAY, D05-P04-PAUSE-REASON, D05-P04-EXIT. It sets formal_acceptance=false. Mark D05_REMAINING_ORDER_CANDIDATE.md/json as superseded by the approval. Do not delete them.\n\n2) Checker, registry and pins (tools/check_p04_order_evidence.py). Fix the REQUIRED authority refs:\n- destruction_stop: replace the wrong BASELINE:183 binding (183 is mana depletion) with D05-P04-DESTRUCTION.\n- power_stop: add D05-P04-PAUSE-REASON. Keep BASELINE:183 only where it truly covers power.\n- exit_release and patience_release: add D05-P04-EXIT.\n- paused_midnight and midnight_settlement: add D05-P04-MIDNIGHT-DAY.\nMake the checker require the approval record and its hash, and fail when any mandatory D05 ID is missing. Rerun the existing negative, role and applicability fixtures and add one negative case per new ID. Do not change measurement thresholds or the 15 conditions + EV.\n\n3) Evidence that each rule is actually exercised. Do not relabel existing evidence. Map each approved order to an existing S1–S4 raw record only if that record's source, config, input and environment match the current version exactly. Already known:\n- S4 caused NO_POWER by a direct disconnect, not real depletion.\n- No raw record covers the accident-destruction next-minute release, a 00:00 completion booked to the new day, or a command exit versus an AI exit.\nFor each such gap, report \"probe needed\" with a concrete boundary case. Root then runs the minimal native probe on the current product (5f6bc11d). No product code changes; game_source_write_authorized=false.\n\n4) Docs. Update ORDER_AUDIT.md, order-audit.json and CURRENT_STATUS.md. All 7 domains keep their current function and line references. Remove the 'pending a–d' wording. Status stays 14/88 formal (the stale 13 must be corrected) with no partial credit.\n\n5) After the worker submits, Root runs:\n- validation p04-acceptance and Local8 on the new checker SHA;\n- the new index from the existing r22 collection plus any new probe raw;\n- a final full regression on exactly the final source and checker. Do not reuse the old f5 full178 (checker f5 is not the final a61 checker). Bind tests/business/test_required_kitchen.gd separately.\nThen a whole-unit independent Opus review of the full current file roster, followed by the normal prepare-integration, integration and final, in the order P04 first, then the support work on main 9b1a18c1. Native-Windows conditions stay individually pending if they are required.\n\nEstimates: worker edits about 15–40 KB of docs and checker, about 1 Codex session (roughly 1–3M input tokens cached, 30–60 min). Possible native probes take about 0.5–1.5 h of Root time. The full regression has previously taken hours. Review material is about 1–3 MB. No cost, API or security expansion, and no change to the acceptance denominator.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "The next repair is bounded and fully specified. It records 4 approved decisions, fixes authority refs in a fixed REQUIRED table, adds the matching negative fixtures and updates the docs. No product logic changes and no new design reasoning are needed. The evidence mapping uses existing raw records, and Root does the native probes. Sol is good enough for this and costs less time and usage. Astra's extra reasoning would not clearly improve the result."
+}

docs/plans/original-completion-2026-10-02/execution/p04-01-owner-approval-20261018/D05_ACTUAL_HUMAN_APPROVAL.json

@@ -0,0 +1,39 @@
+{
+  "source": "Actual human reply in this same chat, questionItem call_5fa8987f83284eb58b685002499cb9df",
+  "received_client_date_jst": "2026-10-18",
+  "original_plan_id": "P04-01",
+  "decision": "D05 remaining order policies",
+  "approved": [
+    {
+      "id": "destruction_completion_order",
+      "question_item": 0,
+      "answer_exact": "現行順序を承認する（Opus推奨）",
+      "approved_question_policy": "コマンド破壊をサービス完了前に処理。事故・襲撃による破壊は完了・課金後に処理してその分の売上を有効とし、次の分で失敗処理と予約解放。"
+    },
+    {
+      "id": "midnight_revenue_day",
+      "question_item": 1,
+      "answer_exact": "新しい日に計上し、前日決算・維持費を完了より先に確定する（Opus推奨・現状維持）",
+      "approved_question_policy": "00:00完了のサービス売上は新しい日に計上。前日決算・維持費は完了より先に確定。既承認の維持費規則と18:00交代順序を維持。"
+    },
+    {
+      "id": "pause_reason_priority",
+      "question_item": 2,
+      "answer_exact": "2点とも現行動作を確定する（Opus推奨）",
+      "approved_question_policy": "停電と依存先休業が同時なら休業を理由表示の優先とする。どちらも進捗・課金停止、予約保持。"
+    },
+    {
+      "id": "exit_command_ai_order",
+      "question_item": 2,
+      "answer_exact": "2点とも現行動作を確定する（Opus推奨）",
+      "approved_question_policy": "退出コマンドは完了前、AIの予定退出は判断中の客だけを対象として完了後に処理。"
+    }
+  ],
+  "prior_approved_rules_preserved": [
+    "依存先休業中は進捗・課金停止、予約保持、復帰後1回だけ完了",
+    "17:59→18:00昼番作業を先に確定し完了・課金後に交代",
+    "既承認維持費規則"
+  ],
+  "boundary": "These are actual product-order approvals, not acceptance/completion or new candidate-SHA approval. No new values/content/permission/cost change. Counter history retained.",
+  "next": "Actual Opus resumes existing P04 task2dde759 with existing evidence after in-flight P26 repair closure, planning only in parallel."
+}

docs/plans/original-completion-2026-10-02/execution/p04-01-owner-approval-20261018/ROOT_P04_PRESERVED_TO_CURRENT_SOURCE_AUDIT.json

@@ -0,0 +1,133 @@
+{
+  "client_date_jst": "2026-10-18",
+  "preserved_P04_S": "2dde7596a87c43f7bf0bf704b7479f2fa06a5b1c",
+  "current_M": "e6327b4571d3034f7619319d08a01e16e66c9c13",
+  "source_selection": "Git tracked full autoload/scripts/scenes/data/tests/assets/tools plus root settings/Makefile/AGENTS, source_refs .DS_Store/cache exclusions examined separately at actual candidate. Conservative comparison, not narrowed for reuse.",
+  "old_files": 1300,
+  "current_files": 1368,
+  "changed": [
+    {
+      "path": "autoload/simulation_runtime.gd",
+      "P04_source_blob": "b2eca36cebfcc216c3bca0de2c310c06786c74b7",
+      "current_main_blob": "64e1d61bf2cd0acf9466605a318f7a362c793460"
+    },
+    {
+      "path": "scenes/main/main.gd",
+      "P04_source_blob": "eaa051fe5bca4f56de0c4ac294477f770d13d095",
+      "current_main_blob": "fff37f082d750bb91c71f2aa54d168c9e2cb8fe7"
+    },
+    {
+      "path": "scenes/main/world_preview.gd",
+      "P04_source_blob": "e1f5b0eb86b64b64216000c48d62e28555dc6536",
+      "current_main_blob": "fa32fe0344d20565b6d542da1256a94e8dee1845"
+    },
+    {
+      "path": "scripts/core/save_service.gd",
+      "P04_source_blob": "92464b958e5a55c2ed245afdb5819e3f22f71551",
+      "current_main_blob": "236a8f157c0d98a205e7244e8b06caceb1e336a1"
+    },
+    {
+      "path": "scripts/relationship/relationship_service.gd",
+      "P04_source_blob": "1d1e093cd4ba21927c08e30d92232ba676b2731d",
+      "current_main_blob": "ba632c34d2a3fe5ebcb742746d3bbf54e06e383a"
+    },
+    {
+      "path": "scripts/ui/guest_observation_panel.gd",
+      "P04_source_blob": "39557906f5d9ca95611407e510521d4cc4b3b2ab",
+      "current_main_blob": "d4bf77783ee801077f3adb409e2eac3eea7f0a9b"
+    },
+    {
+      "path": "scripts/ui/room_presentation.gd",
+      "P04_source_blob": "5945440e28e3aa8304bd4477196009ac2b59f127",
+      "current_main_blob": "0c1fa7fb911b6017291732f09fb5073aeaeb2fd9"
+    },
+    {
+      "path": "tests/business/test_required_kitchen.gd",
+      "P04_source_blob": "47b252a4686ac47b8fb02588985ec4437617f8bc",
+      "current_main_blob": "df535f9f67213ea9c14fdefc20340f7f2a71090c"
+    },
+    {
+      "path": "tools/regression/suite-policy.json",
+      "P04_source_blob": "3969e9715552efc333b2f0f6e3d02a9903154f4c",
+      "current_main_blob": "ad194ae425fb8123fa191ed3635f404c098f692d"
+    }
+  ],
+  "added": [
+    "scripts/relationship/original_relationship_state.gd",
+    "scripts/relationship/original_relationship_state.gd.uid",
+    "scripts/special/peeping_room_service.gd",
+    "tests/fixtures/p08-02/README.md",
+    "tests/fixtures/p08-02/mixed_world.gd",
+    "tests/fixtures/p08-02/mixed_world.gd.uid",
+    "tests/fixtures/p08-02/reader.gd",
+    "tests/fixtures/p08-02/reader.gd.uid",
+    "tests/fixtures/p08-02/writer.gd",
+    "tests/fixtures/p08-02/writer.gd.uid",
+    "tests/fixtures/p08-03/checker_fixture.py",
+    "tests/fixtures/p08-03/passive_placement.gd",
+    "tests/fixtures/p08-03/passive_placement.gd.uid",
+    "tests/fixtures/p08-03/placement.gd",
+    "tests/fixtures/p08-03/placement.gd.uid",
+    "tests/fixtures/p08-03/r05-reader-checkpoint-provenance.json",
+    "tests/fixtures/p08-03/r05-reader-checkpoint.json.gz",
+    "tests/fixtures/p23-03/diagnostic_stream.gd",
+    "tests/fixtures/p23-03/diagnostic_stream.gd.uid",
+    "tests/fixtures/p23-03/layout_comparison.gd",
+    "tests/fixtures/p23-03/layout_comparison.gd.uid",
+    "tests/fixtures/p23-03/observation.gd",
+    "tests/fixtures/p23-03/observation.gd.uid",
+    "tests/fixtures/p23-03/passive_observation.gd",
+    "tests/fixtures/p23-03/passive_observation.gd.uid",
+    "tests/fixtures/p23-03/passive_os_recorder.gd",
+    "tests/fixtures/p23-03/passive_os_recorder.gd.uid",
+    "tests/fixtures/p23-03/queued_elevator.json",
+    "tests/fixtures/p23-03/r13_actor_overlap.json",
+    "tests/fixtures/p23-03/r13_service_region_gap.json",
+    "tests/fixtures/p23-03/recorded-badge-negative.json.gz",
+    "tests/fixtures/p23-03/repair28_frame180_projection.json",
+    "tests/fixtures/p23-03/repair28_r15_negative.json",
+    "tests/s1/test_p08_combined_migration.gd",
+    "tests/s1/test_p08_combined_migration.gd.uid",
+    "tests/s4/test_original_relationship_model.gd",
+    "tests/s4/test_original_relationship_model.gd.uid",
+    "tests/s4/test_original_relationship_runtime.gd",
+    "tests/s4/test_original_relationship_runtime.gd.uid",
+    "tests/special/peeping_room_fixture.gd",
+    "tests/special/test_p13_uid_policy.py",
+    "tests/special/test_peeping_room_evidence.gd",
+    "tests/special/test_peeping_room_geometry.gd",
+    "tests/special/test_peeping_room_reference.gd",
+    "tests/special/test_peeping_room_runtime.gd",
+    "tests/special/test_peeping_room_save.gd",
+    "tests/transport/test_runtime_build_preview.gd",
+    "tests/transport/test_runtime_build_preview.gd.uid",
+    "tests/ui/fixtures/selection_cross_process.gd",
+    "tests/ui/fixtures/selection_cross_process.gd.uid",
+    "tests/ui/test_p08_normal_placement_ops.gd",
+    "tests/ui/test_p08_normal_placement_ops.gd.uid",
+    "tests/ui/test_p23_life_observation.gd",
+    "tests/ui/test_p23_life_observation.gd.uid",
+    "tests/ui/test_selection_departure.gd",
+    "tests/ui/test_selection_departure.gd.uid",
+    "tools/check_p08_migration_evidence.py",
+    "tools/check_p08_normal_placement_evidence.py",
+    "tools/check_p13_content_difference.py",
+    "tools/check_p23_life_observation_evidence.py",
+    "tools/check_p24_selection_evidence.py",
+    "tools/run_p08_mixed_migration.py",
+    "tools/run_p08_normal_placement.py",
+    "tools/run_p13_reference_tests.py",
+    "tools/run_p18_relationship_tests.py",
+    "tools/run_p23_life_observation.py",
+    "tools/test_p08_migration_evidence.py",
+    "tools/test_p08_normal_placement_evidence.py",
+    "tools/test_p23_life_observation_evidence.py"
+  ],
+  "removed": [
+    "tools/check_p04_order_evidence.py"
+  ],
+  "direct_full_source_equality": false,
+  "old_P04_full_evidence_auto_reuse_accepted": false,
+  "new_native_runs": 0,
+  "conclusion": "Rebind current exact final combined S/M, engine/policy/input/roster and checker; old full178 cannot automatically cover changed product/test roster. No new whole/full run launched while P26 active."
+}

docs/plans/original-completion-2026-10-02/execution/p04-01-owner-approval-20261018/ROOT_PLAN_VERSION_NOTES.json

@@ -0,0 +1,12 @@
+{
+  "actual_opus": "0e5dee1afba14d56877edba14796b6a2",
+  "preserved_P04_S": "2dde7596a87c43f7bf0bf704b7479f2fa06a5b1c",
+  "no_worker_started": true,
+  "no_repaircounter_increment": true,
+  "formal_total_current": 15,
+  "stale_plan_labels": [
+    "Opus wording14/88 is old; currentformal15/88",
+    "Opus product5f6bc11d/main9b1a18c labels are old; rebind exact actual currentM/source/settings/roster beforeanyprobes, never relabel old results"
+  ],
+  "next": "After P26 closure, nextactualP04commander must see latest main15/88 and decide exactS/Q/M repair/test inputs. Actual4D05answers not pending."
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/.gitignore

@@ -0,0 +1,2 @@
+__pycache__/
+*.pyc

docs/plans/original-completion-2026-10-02/execution/p04-01/CHECKER_PROTOCOL.md

@@ -0,0 +1,34 @@
+# Checker protocol — historical repair29 description
+
+Repair30 is a partial, blocked implementation. CURRENT_STATUS.md and
+REPAIR30_STATUS.md supersede the current-role, authority and execution claims
+below. M is c0ea009; product manifests exclude checker, selected native/full
+SourceRefs include it. Q is the actual recomputed merge-tree; C requires separate
+normal-integration qualification. All four remaining D05 policies are approved.
+Do not run the old collection/index recipe as fresh-Q evidence. No 500000-byte
+limit applies. The historical protocol text below is retained for provenance.
+
+Worker **SOURCE-READY / NOTRUN**. [CURRENT_STATUS.md](CURRENT_STATUS.md) is canonical for execution facts; creation-time NOT RUN in REPAIR22–28 and runbooks is historical. [ORDER_AUDIT.md](ORDER_AUDIT.md) and order-audit.json give the eleven-phase/seven-domain audit. [D05_REMAINING_ORDER_CANDIDATE.md](D05_REMAINING_ORDER_CANDIDATE.md) is approval material only.
+
+B = `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
+The checker remains a61 (`a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850`), with its registry unchanged. Fifteen conditions + EV, seven domains, three safety outcomes and30/88 denominator remain fixed. Original credit13/88 unchanged; P04 remains incomplete.
+
+| Evidence | Root-measured current fact |
+| --- | --- |
+| B/p04-s4-native-r28 | 4/4 PASS; PIDs49940,50044,50078,50105 all ended; guards0; cleanup0. |
+| B/audit-support/p04-root-fb8b-s4-r01 | S4 controls and native receipts PASS. |
+| B/audit-support/p04-root-fb8b-local-r01 | Local8 PASS and registered validation fb8b PASS28.095s. |
+| B/audit-support/p04-raw-collect-r22 | Current collection, preserving raw and exact relocation/series SHA256 bindings. |
+| B/p04-evidence/index.json | Schema2; missing_conditions=[]; all15 conditions + EV mechanically verified. |
+
+Root-measured native product5f6bc11d/main9b1a18c1. Current product is B/audit-support/p04-r17-full-inputs-r01/product, not deb11300. Static current hashes and handler/function lines, plus exact proof pins, are in REPAIR29_STATIC_SOURCE.json. The index preserves source/config/input/environment applicability and native ownership joins; mechanical PASS does not grant D05 approval or original completion.
+
+C NATIVE_RUNS/native_ownership/verify_native remains unchanged. C shift proof joins actual owned start/end PIDs, serviceID, original priceSnapshot, service.payment key and receipt entries; no fixed PID or ledger number. S1 typed raw joins pre-travel ACTIVE reservation/task/staff/cell to boarded trip; JSON summaries do not replace typed evidence.
+
+Only S4 supplies isolated power_stop. It preserves native ownership, full product1338 plus sole QA override, Writer/Reader packages, exact Runtime typed restoration and replay, actual NO_POWER, operating dependency, powered/ACTIVE kitchen, positive global mana and open operator. Raw graph/revision, source-derived hold, intervening held minutes, zero stopped charge, original identity and one recovery sale are joined without canonicalization or dropped fields. S4 causes NO_POWER by directly calling disconnect_nodes; it is not global-depletion proof. Global depletion appears only in B1 combined diagnostic; B1 has RELATED_FACILITY_INACTIVE and supplies neither isolated power_stop nor priority approval.
+
+The low authority finding remains explicit: destruction_stop is bound to BASELINE:183, a mana-depletion line, not destruction authority. An explicit D05 destruction rule is required; pin/registry correction only after approval through normal repair. Observation and mechanical verification do not resolve this gap. A01 midnight ownership upkeep, dependency hold and18:00 are approved and are not re-asked. Other mandatory priorities remain pending under D05(a–d).
+
+Full178 used checker f5 (`f5b44827958f2ae352fe5c4bc3a1ffd4211ec7a41fc4c0759c8b954891662324`),21615 checks; exact receipt preserved at B/audit-support/p18-regression-support-final-r01/native-full178/runner-ended.json (runner-input.json selected_source_map preserves all1339 selected inputs; source-start.json records initial product sources). **No full1339 run against a61 exists.** Suites/parse not executing Python support checker-independent product applicability only. Static full178 selected-map comparison found one test-source difference (tests/business/test_required_kitchen.gd: full3a9c92f8…, current5dcc86d6…); no game-source difference. Runner must preserve that test applicability binding; no blanket1338 identity is claimed. Do not relabel the old full proof as a61 validation.
+
+Remaining Runner work: owner D05 decisions after review, any subsequent normal repair, support53cb normal registered rebind, final full run and final applicability binding, formal independent review, integration P04 first then support on main9b1a18c1, and individually applicable nativeWindows obligations. Missing original authority or unknown mandatory rules remain gaps regardless of mechanical PASS. No probe or test is requested or run by this docs-only repair.

docs/plans/original-completion-2026-10-02/execution/p04-01/CURRENT_STATUS.md

@@ -0,0 +1,79 @@
+# P04-01 REPAIR51 canonical handoff
+
+ACTUAL S50 historical evidence complete; S51 docs-only resubmission; S51 native admission pending at worker handoff (fresh native on Q51 required by S-binding, checker:368-371); post-submit admission determined only by Root version-pinned receipts; formal_acceptance false; P04=0.
+
+ACTUAL S50: native6 / 24 phases PASS (historical; bound to S50/Q50).
+ACTUAL S50: collector 15+EV, missing 0 (historical; bound to S50/Q50).
+ACTUAL S50 receipts: build/audit-support/p04-root-acceptance-a9ef681f/.
+ACTUAL S47: full184 retains its original label; conditional reuse only under the existing checker and applicability map. r22 remains historical.
+
+S51 native admission is pending AT HANDOFF. After submission, only Root version-pinned receipts under build/audit-support/p04-root-acceptance-<S>/ and build/p04-evidence/index.json determine admission. Worker-time NOT RUN / UNDETERMINED / unexecuted text below is historical and never a reason to rebuild. Fresh native6 on Q51 is required by S/Q binding, not by that text. No future S51 SHA, Q51 or receipt is claimed.
+
+All six D05 IDs remain approved; pending D05 is empty. PAUSE-REASON: S5B proves same-tick onset from ACTIVE gives RELATED. Power-first then dependency closure shows NO_POWER statically at M facility_service.gd:860-864; that sequential case is EXPLICITLY UNRESOLVED/UNPROVEN under the unchanged approval. It is not a defect, cured, proven, or silently narrowed. The :569 gate preserves P04 safety regardless of label. Any later product change needs a separate owner-authorised task; do not amend the contract or re-ask the owner.
+
+Remaining Root gates:
+
+- Root fixes Q51; compare actual hashes with REPAIR51_APPLICABILITY_MAP.json; stop reuse on executable differences
+- clean exact-Q check-only; capacity and PID check; one heavy lease for fresh native6 on Q51
+- reader/adapters then collector; full184 conditional reuse check; order CLI/complete_B conditional reuse or rerun once
+- index regeneration; one p04-acceptance validate; separate Opus whole-unit independent review
+- prepare / exactC / integration / final / RootDB join / ledger / main push
+- nativeWindows individually pending
+
+Scope: documentation-only repair within the original P04-01/W unit. Original total 30/88, formal 16, P04 credit 0; formal_acceptance false; unit incomplete. No partial credit. See REPAIR51_APPLICABILITY_MAP.json for hashes and reuse conditions.
+
+# Historical, superseded
+
+All older text below, including its current/status headings and worker-time execution statements, is superseded historical material.
+
+## REPAIR49 current correction
+
+Source-ready only; original 30/88, formal 16, P04=0, no partial credit.
+REPAIR48's specification-mismatch blocker below is historical and corrected:
+the immutable 7000-byte original has SHA256
+d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f;
+removing its single EOF LF gives
+9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881.
+This is the existing Git/Runner strip/checker one-EOF-LF pin contract.
+No specification, approval or normalization change. Older contradictory wording
+below is superseded history, including blanket full-reuse prohibitions and
+all-controls-unexecuted wording. Q47 admission/index failures remain failures.
+See REPAIR49_STATUS.md for closure audit and verbatim complete_B FileNotFoundError.
+Root handoff reports payload(B), all53, series/join/power PASS; order-typed remains
+UNDETERMINED. Worker did not rerun them. Corrected complete_B remains unexecuted.
+Old native/full successes confer no new-S acceptance or credit.
+
+
+REPAIR48 current source status: see [REPAIR48_STATUS.md](REPAIR48_STATUS.md). Earlier run directions and successes below are historical; they grant no P04 credit.
+
+RUN47 current harness status: see REPAIR47_STATUS.md, REPAIR47_PLAN.json and REPAIR47_VALIDATION.json. Original unit remains unaccepted; earlier status below is historical.
+
+# Historical P04-01 status — repair31
+
+**BLOCKED: partial implementation; do not start the once-only native/full run.**
+Formal completed status is **16/88**, with **zero P04 credit**.
+
+D05 is six of six actually approved; adoption and exact-Q verification are pending.
+All four later D05 policies were approved by the actual human on 2026-10-18.
+D05_REMAINING_APPROVAL.json preserves exact answers and binds both supplied
+records by path/SHA256. Dependency hold, 18:00 and A01 upkeep remain approved.
+The old candidates are superseded, not deleted.
+
+Frozen M is c0ea009b28a7649aca6a433a1a24dc0be5e7ab81. Actual tree enumeration
+found 1368 product files excluding the checker and 3644 metadata paths.
+Native/full selected SourceRefs must additionally include the checker.
+Final S, genuine non-production Q and later normal C are not supplied by this
+worker. No Git writes, engine execution, Runner operations or delegation.
+
+The checker has partial authority/role corrections; the seven-domain audit uses
+M source. S5 executable probes, fresh-Q collector/wrapper/index plumbing,
+full-proof joins and independent normal-C qualification remain incomplete.
+Normal C now fails closed without the authoritative Root/Runner receipt contract.
+The isolated Git fixtures remain Root-run because `/tmp` creation was denied.
+See [REPAIR31_STATUS.md](REPAIR31_STATUS.md) for precise remaining work and the
+corrected Root execution order; [s5/PENDING.md](s5/PENDING.md) records S5 gaps.
+
+Historical S1–S4/r22, old registered validation and f5 full178 retain their
+original identities. They are not fresh Q evidence. All 15 conditions plus EV
+still require exact-version evidence; nativeWindows remains individually
+pending. Static fixture results confer no original acceptance credit.

docs/plans/original-completion-2026-10-02/execution/p04-01/D05_OWNER_APPROVAL.json

@@ -0,0 +1,42 @@
+{
+  "plan_id": "P04-01",
+  "decision_scope": "D05 dependency closure and 18:00 transaction order only",
+  "recorded_at": "2026-10-15T13:51:09.167952+00:00",
+  "origin": "direct_user_reply",
+  "question_item_ids": [
+    "[\"request_user_input_async\",\"call_cea3c55446014be4bde664de0ab8c381\",0]",
+    "[\"request_user_input_async\",\"call_cea3c55446014be4bde664de0ab8c381\",1]"
+  ],
+  "approved_choices": [
+    {
+      "id": "D05-P04-DEPENDENCY",
+      "user_answer": "依存先の休業中は進捗・課金を停止し、予約を保持して復帰後に1回だけ完了する（Opus推奨・現状維持）",
+      "contract": "依存先の休業中は開始済みサービスの進捗と課金を停止し、予約とサービスIDを保持する。復帰後に残りを処理し、完了・課金は1回だけ。停止上限は新設しない。直接の休業操作はD-034を維持する。"
+    },
+    {
+      "id": "D05-P04-SHIFT-1800",
+      "user_answer": "17:59→18:00の昼番作業を先に確定し、完了・課金後に交代する（Opus推奨・現状維持）",
+      "contract": "[17:59,18:00)の昼番作業を先に確定し、必要時間に達したサービスを18:00に1回だけ完了・課金してから交代する。夜番は[18:00,18:01)から反映する。"
+    }
+  ],
+  "proposal_sha256": "082c6a9e7d8d0648be261ae30e52983e10ed677eaf90ab872b7c9e19793f773c",
+  "required_validation": [
+    "停止中課金0",
+    "完了課金1回",
+    "予約の孤立0",
+    "同分再送",
+    "日跨ぎ",
+    "正式保存・別PID復元",
+    "夜番不在",
+    "既存残業タスク",
+    "7領域の現版への証拠適用性",
+    "必要検証・独立レビュー・通常統合"
+  ],
+  "formal_acceptance": false,
+  "original_unit_complete": false,
+  "original_denominator": {
+    "packages": 30,
+    "units": 88
+  },
+  "remaining": "仕様選択は確定。条件ごとの既存証拠適用性確認と不足境界の検証、独立レビュー、通常統合は未完了。D05の他領域を一括解決したとは扱わない。"
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/D05_REMAINING_APPROVAL.json

@@ -0,0 +1,53 @@
+{
+  "task_id": "P04-01",
+  "origin": "direct_user_reply",
+  "formal_acceptance": false,
+  "source_bindings": [
+    {
+      "path": "build/owner-handoff/p04-after-p26-closure-r01/D05_ACTUAL_HUMAN_APPROVAL.json",
+      "sha256": "cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96"
+    },
+    {
+      "commit": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01-owner-approval-20261018/D05_ACTUAL_HUMAN_APPROVAL.json",
+      "sha256": "cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96"
+    }
+  ],
+  "approved_choices": [
+    {
+      "id": "D05-P04-DESTRUCTION",
+      "source_id": "destruction_completion_order",
+      "answer_exact": "現行順序を承認する（Opus推奨）",
+      "approved_question_policy": "コマンド破壊をサービス完了前に処理。事故・襲撃による破壊は完了・課金後に処理してその分の売上を有効とし、次の分で失敗処理と予約解放。"
+    },
+    {
+      "id": "D05-P04-MIDNIGHT-DAY",
+      "source_id": "midnight_revenue_day",
+      "answer_exact": "新しい日に計上し、前日決算・維持費を完了より先に確定する（Opus推奨・現状維持）",
+      "approved_question_policy": "00:00完了のサービス売上は新しい日に計上。前日決算・維持費は完了より先に確定。既承認の維持費規則と18:00交代順序を維持。"
+    },
+    {
+      "id": "D05-P04-PAUSE-REASON",
+      "source_id": "pause_reason_priority",
+      "answer_exact": "2点とも現行動作を確定する（Opus推奨）",
+      "approved_question_policy": "停電と依存先休業が同時なら休業を理由表示の優先とする。どちらも進捗・課金停止、予約保持。"
+    },
+    {
+      "id": "D05-P04-EXIT",
+      "source_id": "exit_command_ai_order",
+      "answer_exact": "2点とも現行動作を確定する（Opus推奨）",
+      "approved_question_policy": "退出コマンドは完了前、AIの予定退出は判断中の客だけを対象として完了後に処理。"
+    }
+  ],
+  "prior_approved_rules_preserved": [
+    "依存先休業中は進捗・課金停止、予約保持、復帰後1回だけ完了",
+    "17:59→18:00昼番作業を先に確定し完了・課金後に交代",
+    "既承認維持費規則"
+  ],
+  "supersedes": [
+    "D05_REMAINING_ORDER_CANDIDATE.md",
+    "D05_REMAINING_ORDER_CANDIDATE.json"
+  ],
+  "original_unit_complete": false
+}
+

docs/plans/original-completion-2026-10-02/execution/p04-01/D05_REMAINING_ORDER_CANDIDATE.json

@@ -0,0 +1,131 @@
+{
+  "task_id": "P04-01",
+  "revision": "repair29",
+  "status": "superseded by D05_REMAINING_APPROVAL.json; candidate text below is historical",
+  "approval": "D05_REMAINING_APPROVAL.json",
+  "apply_to_product_or_checker": false,
+  "review_flow": "Root asks owner after review. This document neither requests approval from worker nor records it.",
+  "proof_legend": {
+    "R": "B/audit-support/p04-raw-collect-r22",
+    "I": "B/p04-evidence/index.json schema2",
+    "pins": "REPAIR29_STATIC_SOURCE.json; R/MANIFEST.json and I raw_references/versions"
+  },
+  "choices": [
+    {
+      "id": "a",
+      "topic": "Power vs closure/dependency",
+      "status": "pending D05",
+      "observation": {
+        "status": "observed-current",
+        "behavior": "RELATED_FACILITY_INACTIVE selected before NO_POWER; both pause service with no charge.",
+        "source": "FacilityService _prepare_service_for_tick:853–874, phase FACILITY_COMPLETION after MANA projection",
+        "proof": "Root-measured R/s4.json isolated NO_POWER; R/s3.json B1 combined RELATED diagnostic; REPAIR29_STATIC_SOURCE.json source pins"
+      },
+      "inputs": "Same service and minute, related facility inactive and power unavailable; include direct closure separately under D-034.",
+      "A": {
+        "recommended": true,
+        "rule": "Keep current RELATED-first reason selection.",
+        "outcome": "Service held, progress/payment paused, reservation and serviceID retained.",
+        "side_effects": "Reason reports dependency while both causes apply; no new hold limit.",
+        "dependencies": "Approved dependency hold, D-034 direct closure, existing MANA-before-completion order."
+      },
+      "B": {
+        "rule": "NO_POWER wins reason selection when both conditions fail.",
+        "outcome": "Same no-charge hold safety; reason reports power.",
+        "side_effects": "Reason/event and recovery-precedence semantics would change; concrete implementation and exact-version proof require normal repair.",
+        "dependencies": "Must retain no-charge while either legitimate hold persists; preserve approved dependency reservation/identity behavior."
+      }
+    },
+    {
+      "id": "b",
+      "topic": "Destruction",
+      "status": "pending D05",
+      "observation": {
+        "status": "observed-current",
+        "behavior": "Command destruction in APPLY precedes completion. Incident destruction in INCIDENTS follows it; B4a shows25G charge then destruction in same tick.",
+        "source": "Runtime _process_tick_commands:5743, _advance_facilities:8482, _advance_defense:8577 / _apply_defense_outcome_boundary:9804",
+        "proof": "Root-measured R/s3.json B4a/B4b; REPAIR29_STATIC_SOURCE.json"
+      },
+      "inputs": "A service due for completion in a minute with command or incident destruction of its facility.",
+      "A": {
+        "recommended": true,
+        "rule": "Keep command-before-completion and incident-after-completion behavior.",
+        "outcome": "Command destruction prevents completion; incident may follow a valid completion/charge that minute; next-tick broken failure/release remains.",
+        "side_effects": "Completion and destruction can coexist in one tick as B4a; not a universal no-sale-on-destruction rule.",
+        "dependencies": "P04 stopped-charge and orphan-reservation safety; explicit D05 destruction authority required."
+      },
+      "B": {
+        "rule": "An incident in the same minute suppresses that minute completion (or voids it if already posted).",
+        "outcome": "No retained completion/sale for the incident-destruction minute.",
+        "side_effects": "Would require preemption or atomic reversal of completion, inventory, payment and rewards; no unapproved numbers or refund amounts supplied.",
+        "dependencies": "Owner must specify the suppress/void transaction semantics; preserve idempotency, no orphan reservations and approved shift/hold rules; normal implementation and new proof required."
+      }
+    },
+    {
+      "id": "c",
+      "topic": "Exit",
+      "status": "pending D05",
+      "observation": {
+        "status": "observed-current",
+        "behavior": "Command exit APPLY before completion/charging; AI PLANNED_EXIT after them; LEAVING despawns later.",
+        "source": "Runtime _execute_leave_facility_queue:7553; _advance_guest_ai_decisions:8738–8762",
+        "proof": "Root-measured R/s3.json B2a/B2b/B3 and B1 departure history; source pins REPAIR29_STATIC_SOURCE.json"
+      },
+      "inputs": "Exit command or AI exit due at a minute with a completion-ready service. Current AI PLANNED_EXIT applies to DECIDING guests; do not assume it preempts an active service.",
+      "A": {
+        "recommended": true,
+        "rule": "Keep current command/AI distinction and state predicates.",
+        "outcome": "Command leave/release happens first; eligible AI planned exit follows completion/charging and queue processing.",
+        "side_effects": "AI due time alone does not universally cancel current-minute completion; later despawn remains separate.",
+        "dependencies": "D-034, reservation ownership/release, phase6 completion before phase10 AI."
+      },
+      "B": {
+        "rule": "An exit due this minute preempts completion.",
+        "outcome": "Applicable due exits release/cancel before completion and no completion sale occurs for that preempted service.",
+        "side_effects": "Changes eligibility for exit and service cancellation; would change simultaneous completion/payment observations.",
+        "dependencies": "Owner must define applicable due-exit states; preserve no orphan reservation, no duplicate charge and approved dependency/shift behavior; normal repair and exact proof required."
+      }
+    },
+    {
+      "id": "d",
+      "topic": "Cost time/day attribution beyond A01 and18:00",
+      "status": "pending D05",
+      "observation": {
+        "status": "observed-current",
+        "behavior": "Sale dated at post-increment minute. At00:00 TIME_BOUNDARIES settlement/upkeep precede completions;00:00 sales go to new day because daily-close period_end is exclusive.",
+        "source": "Kernel advance_one_minute:122; Runtime _apply_service_transaction:11785 /11826–11838; coordinator _process_daily_close:1125 /1136",
+        "proof": "Root-measured R/s2a.json paid midnight/replay; I C; REPAIR29_STATIC_SOURCE.json"
+      },
+      "inputs": "Service completes on calendar boundary; account period ends at boundary minute. A01 ownership upkeep and18:00 shift interval remain fixed.",
+      "A": {
+        "recommended": true,
+        "rule": "Keep post-increment sale time and new-day attribution for00:00 sales.",
+        "outcome": "Closing day excludes boundary-minute completion; new day receives sale.",
+        "side_effects": "Closing summary is finalized before those sales; upkeep ownership rule unchanged.",
+        "dependencies": "Exclusive daily-close interval, sale timestamp, idempotent close/replay; P04 mandatory timing/attribution separate from D04/P05 numeric cost math."
+      },
+      "B": {
+        "rule": "Boundary-minute sales belong to closing day.",
+        "outcome": "Closing day includes those sales.",
+        "side_effects": "Would require a distinct accounting attribution or revised boundary transaction sequencing; affects daily summaries/reconciliation/replay. No numeric cost policy is invented.",
+        "dependencies": "Owner must settle attribution mechanics and same-boundary replay; preserve A01 and18:00, all P04 safety criteria; normal repair and exact-version proof required."
+      }
+    }
+  ],
+  "bundle": {
+    "label": "accept current-behavior A for a-d",
+    "status": "pending D05",
+    "recommended": true,
+    "coupling_notes": [
+      "a preserves the approved hold and no-charge safety independent of reason priority.",
+      "b and c use the same completion boundary: commands before, incidents and AI after. Changing either requires separate applicability and replay checks.",
+      "d relies on TIME_BOUNDARIES before completion; changing attribution can affect the transaction history used by b/c and settlement idempotency.",
+      "A01 ownership upkeep, dependency hold and18:00 interval are already approved and are excluded from renewed approval.",
+      "Owner may explicitly rule some remaining items non-mandatory; no such ruling exists here. Unknowns stay pending; mandatory acceptance is never relaxed."
+    ]
+  },
+  "authority_gap": "destruction_stop currently binds BASELINE:183, which is mana depletion, not destruction authority. Explicit D05 destruction rule required. Pin/registry repair only after approval through normal repair.",
+  "power_scope": "S4 NO_POWER uses direct disconnect_nodes; not proof of global depletion, which exists only in B1 combined diagnostic.",
+  "original_unit_complete": false,
+  "superseded_by": "D05_REMAINING_APPROVAL.json"
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/D05_REMAINING_ORDER_CANDIDATE.md

@@ -0,0 +1,95 @@
+> Superseded: D05_REMAINING_APPROVAL.json records the actual human approval of all four policies. The candidate text below is retained as history.
+
+# D05 remaining order candidate — repair29
+
+**Approval candidate only. SOURCE-READY / NOTRUN.** Root asks the owner after review. Nothing is applied to product, checker or registry; observation is not approval. A01 midnight ownership upkeep, dependency hold and18:00 are already approved and are not re-asked.
+
+Structured choices: [D05_REMAINING_ORDER_CANDIDATE.json](D05_REMAINING_ORDER_CANDIDATE.json). Source path/line/SHA256 pins: [REPAIR29_STATIC_SOURCE.json](REPAIR29_STATIC_SOURCE.json); phase map: [ORDER_AUDIT.md](ORDER_AUDIT.md). R = B/audit-support/p04-raw-collect-r22; I = B/p04-evidence/index.json. These are Root-measured exact-version proof references, with raw/provenance pins in R/MANIFEST.json, I and the static manifest.
+
+## (a) Power vs closure/dependency — pending D05
+
+**Observed-current:** RELATED_FACILITY_INACTIVE selected before NO_POWER; both pause service with no charge. Source: FacilityService _prepare_service_for_tick:853–874, phase FACILITY_COMPLETION after MANA projection. Proof: Root-measured R/s4.json isolated NO_POWER; R/s3.json B1 combined RELATED diagnostic; REPAIR29_STATIC_SOURCE.json source pins.
+
+**Inputs:** Same service and minute, related facility inactive and power unavailable; include direct closure separately under D-034.
+
+**Option A (recommended; keep current behavior):** Keep current RELATED-first reason selection.
+
+- Outcomes: Service held, progress/payment paused, reservation and serviceID retained.
+- Side effects: Reason reports dependency while both causes apply; no new hold limit.
+- Dependencies: Approved dependency hold, D-034 direct closure, existing MANA-before-completion order.
+
+**Option B:** NO_POWER wins reason selection when both conditions fail.
+
+- Outcomes: Same no-charge hold safety; reason reports power.
+- Side effects: Reason/event and recovery-precedence semantics would change; concrete implementation and exact-version proof require normal repair.
+- Dependencies: Must retain no-charge while either legitimate hold persists; preserve approved dependency reservation/identity behavior.
+
+## (b) Destruction — pending D05
+
+**Observed-current:** Command destruction in APPLY precedes completion. Incident destruction in INCIDENTS follows it; B4a shows25G charge then destruction in same tick. Source: Runtime _process_tick_commands:5743, _advance_facilities:8482, _advance_defense:8577 / _apply_defense_outcome_boundary:9804. Proof: Root-measured R/s3.json B4a/B4b; REPAIR29_STATIC_SOURCE.json.
+
+**Inputs:** A service due for completion in a minute with command or incident destruction of its facility.
+
+**Option A (recommended; keep current behavior):** Keep command-before-completion and incident-after-completion behavior.
+
+- Outcomes: Command destruction prevents completion; incident may follow a valid completion/charge that minute; next-tick broken failure/release remains.
+- Side effects: Completion and destruction can coexist in one tick as B4a; not a universal no-sale-on-destruction rule.
+- Dependencies: P04 stopped-charge and orphan-reservation safety; explicit D05 destruction authority required.
+
+**Option B:** An incident in the same minute suppresses that minute completion (or voids it if already posted).
+
+- Outcomes: No retained completion/sale for the incident-destruction minute.
+- Side effects: Would require preemption or atomic reversal of completion, inventory, payment and rewards; no unapproved numbers or refund amounts supplied.
+- Dependencies: Owner must specify the suppress/void transaction semantics; preserve idempotency, no orphan reservations and approved shift/hold rules; normal implementation and new proof required.
+
+## (c) Exit — pending D05
+
+**Observed-current:** Command exit APPLY before completion/charging; AI PLANNED_EXIT after them; LEAVING despawns later. Source: Runtime _execute_leave_facility_queue:7553; _advance_guest_ai_decisions:8738–8762. Proof: Root-measured R/s3.json B2a/B2b/B3 and B1 departure history; source pins REPAIR29_STATIC_SOURCE.json.
+
+**Inputs:** Exit command or AI exit due at a minute with a completion-ready service. Current AI PLANNED_EXIT applies to DECIDING guests; do not assume it preempts an active service.
+
+**Option A (recommended; keep current behavior):** Keep current command/AI distinction and state predicates.
+
+- Outcomes: Command leave/release happens first; eligible AI planned exit follows completion/charging and queue processing.
+- Side effects: AI due time alone does not universally cancel current-minute completion; later despawn remains separate.
+- Dependencies: D-034, reservation ownership/release, phase6 completion before phase10 AI.
+
+**Option B:** An exit due this minute preempts completion.
+
+- Outcomes: Applicable due exits release/cancel before completion and no completion sale occurs for that preempted service.
+- Side effects: Changes eligibility for exit and service cancellation; would change simultaneous completion/payment observations.
+- Dependencies: Owner must define applicable due-exit states; preserve no orphan reservation, no duplicate charge and approved dependency/shift behavior; normal repair and exact proof required.
+
+## (d) Cost time/day attribution beyond A01 and18:00 — pending D05
+
+**Observed-current:** Sale dated at post-increment minute. At00:00 TIME_BOUNDARIES settlement/upkeep precede completions;00:00 sales go to new day because daily-close period_end is exclusive. Source: Kernel advance_one_minute:122; Runtime _apply_service_transaction:11785 /11826–11838; coordinator _process_daily_close:1125 /1136. Proof: Root-measured R/s2a.json paid midnight/replay; I C; REPAIR29_STATIC_SOURCE.json.
+
+**Inputs:** Service completes on calendar boundary; account period ends at boundary minute. A01 ownership upkeep and18:00 shift interval remain fixed.
+
+**Option A (recommended; keep current behavior):** Keep post-increment sale time and new-day attribution for00:00 sales.
+
+- Outcomes: Closing day excludes boundary-minute completion; new day receives sale.
+- Side effects: Closing summary is finalized before those sales; upkeep ownership rule unchanged.
+- Dependencies: Exclusive daily-close interval, sale timestamp, idempotent close/replay; P04 mandatory timing/attribution separate from D04/P05 numeric cost math.
+
+**Option B:** Boundary-minute sales belong to closing day.
+
+- Outcomes: Closing day includes those sales.
+- Side effects: Would require a distinct accounting attribution or revised boundary transaction sequencing; affects daily summaries/reconciliation/replay. No numeric cost policy is invented.
+- Dependencies: Owner must settle attribution mechanics and same-boundary replay; preserve A01 and18:00, all P04 safety criteria; normal repair and exact-version proof required.
+
+## Bundle: accept current-behavior A for a-d
+
+Recommended candidate, not approved.
+
+- a preserves the approved hold and no-charge safety independent of reason priority.
+- b and c use the same completion boundary: commands before, incidents and AI after. Changing either requires separate applicability and replay checks.
+- d relies on TIME_BOUNDARIES before completion; changing attribution can affect the transaction history used by b/c and settlement idempotency.
+- A01 ownership upkeep, dependency hold and18:00 interval are already approved and are excluded from renewed approval.
+- Owner may explicitly rule some remaining items non-mandatory; no such ruling exists here. Unknowns stay pending; mandatory acceptance is never relaxed.
+
+destruction_stop currently binds BASELINE:183, which is mana depletion, not destruction authority. Explicit D05 destruction rule required. Pin/registry repair only after approval through normal repair.
+
+S4 NO_POWER uses direct disconnect_nodes; not proof of global depletion, which exists only in B1 combined diagnostic.
+
+P04 timing/attribution remains mandatory; D04/P05 numeric cost math is separate. No acceptance criterion is relaxed. P04 remains incomplete; original13/88 unchanged.

docs/plans/original-completion-2026-10-02/execution/p04-01/EVIDENCE_COLLECTION.md

@@ -0,0 +1,41 @@
+## RUN47 harness repair; original unit remains unaccepted
+
+Q46 S4 failed before engine startup: `AssertionError: complete 316-script parse roster`.
+Secondary guard: `AssertionError: exact source and planned UID set`. Captured S4
+PIDs: `[]`; phases: `[]`; passed: `false`. No game verification ran. This failure
+is historical reference only, never adopted as a pass. Current S4 admission derives
+exact roster/sets from real selection; check-only and native share it. Import-not-
+attempted cleanup requires the original inventory without generated UIDs.
+REPAIR47_PLAN.json and REPAIR47_STATUS.md supersede earlier current-run count and
+reuse instructions. Immutable spec, REQUIRED/REACH_REFS, product, caps, denominator,
+permissions and historical raw are unchanged. Option B: Root freezes new final Q,
+then fresh all-series runs once; no receipt rewriting or reuse adopter.
+
+# Evidence collection — historical repair29 description
+
+Repair30 supersedes current-use claims below: existing S1–S4/r22/full178 records
+remain historical. New Q evidence is required, with checker explicitly selected.
+The fresh-Q collection path and S5 drivers are not ready in this partial repair.
+See REPAIR30_STATUS.md; do not start native/full or formal acceptance yet.
+
+Worker **SOURCE-READY / NOTRUN** (static Read/SHA256 only). No probes, tests, engine or Runner execution in this repair. [CURRENT_STATUS.md](CURRENT_STATUS.md) overrides historical creation-time NOT RUN entries in REPAIR22–28 and runbooks, which remain untouched. Do not repeat their completed execution steps merely because their original prose says pending.
+
+B = `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
+
+| Completed material | Current fact (Root-measured) |
+| --- | --- |
+| B/p04-s4-native-r28 | Four phases PASS; PIDs49940,50044,50078,50105 all ended, guards0, cleanup0. |
+| B/audit-support/p04-root-fb8b-s4-r01 | S4 control/native receipts preserved. |
+| B/audit-support/p04-root-fb8b-local-r01 | Local8 PASS; registered validation on fb8b PASS28.095s. |
+| B/audit-support/p04-raw-collect-r22 | Completed collection of preserved C/series applicability; no new C/S1/S2a/S2b/S3 native runs. |
+| B/p04-evidence | Current schema2 index/generation invocation, missing_conditions=[], all15 conditions + EV mechanically verified. |
+
+Native product5f6bc11d and main9b1a18c1 remain the Root-measured versions. REPAIR29_STATIC_SOURCE.json hashes current B/audit-support/p04-r17-full-inputs-r01/product (1338 files), not old deb11300, and pins current collection/index. Per-series raw/source/config/input/environment joins remain in the immutable collection and schema2 index; this worker neither regenerates nor normalizes raw.
+
+S4 is isolated NO_POWER from direct disconnect_nodes, not global mana depletion. Global depletion is observed only in B1 combined diagnostic. B1 supplies no isolated power_stop or priority approval. Destruction authority BASELINE:183 is a known wrong category (mana depletion); explicit owner D05 destruction rule is required before normal registry/pin repair. Product/checker/registry remain unchanged here.
+
+Full178 used checker **f5**,21615 checks; exact receipt preserved at B/audit-support/p18-regression-support-final-r01/native-full178/runner-ended.json and exact selected inputs at runner-input.json selected_source_map (source-start.json records initial product sources). f5 SHA256 is f5b44827958f2ae352fe5c4bc3a1ffd4211ec7a41fc4c0759c8b954891662324. Product suites/316-file GDScript parse do not execute Python; this does not establish an exact1339 proof against a61. Static comparison with the full178 selected_source_map found one test-source difference (tests/business/test_required_kitchen.gd: full3a9c92f8…, current5dcc86d6…) and no game-source difference. Runner must retain explicit applicability for that test; no blanket product1338 identity with that full178 receipt is claimed. **No full1339 run exists against a61** (a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850). Keep the old full and partial receipts distinct and intact.
+
+Remaining steps belong to Runner: review this repair; Root obtains owner D05(a–d) decisions or explicit non-mandatory rulings; unknown mandatory rules remain pending. Any approved checker/registry/product change uses a normal repair. Perform support53cb normal registered rebind, final full run against the final source/checker and final source/config/input/environment applicability binding, independent review and integration (P04 first, then support on main9b1a18c1). NativeWindows obligations stay individually pending if required. This document does not launch or authorize duplicate probes and does not replace Runner scheduling.
+
+A01 midnight ownership upkeep, dependency hold and18:00 are already approved. P04 timing/attribution remains mandatory, separate from D04/P05 numeric cost math. Original13/88 credit,15 conditions + EV, seven domains, three safety outcomes and30/88 denominator remain unchanged. Original unit is incomplete.

docs/plans/original-completion-2026-10-02/execution/p04-01/NORMAL_C_BOUNDARY32.md

@@ -0,0 +1,33 @@
+# Concrete32 external Runner-record boundary
+
+The supplied normal-gate reference was read directly: verify, has_evidence,
+prepare_integration, approve and integrate (893–1092), and the SQL schema
+(474–483). P26 normal-candidate-example files are format samples only.
+
+`normal_c_join.py` uses read-only SQLite transactions over actual Root-selected
+Runner records. It joins submitted S, candidate C, frozen main_base M, approval,
+validation/review on S and integration/final on C. It checks the exact validation
+roster, raw review result and referenced validation logs, and hashes evidence
+inputs and the logical record snapshot. Root must establish that both databases
+are actual Runner records: arbitrary SQLite files cannot authenticate themselves.
+
+Runner integrate deletes approvals after final verification. Root retains an
+actual consistent Runner snapshot after approve, supplied as
+`--approved-runner-db`; `--runner-db` supplies later final evidence. These are
+read-only inputs, not a new Runner API. The worker creates neither snapshot.
+Missing records fail. No Git, Runner or engine is invoked. Outputs confer no
+acceptance or Git/Q/source/settings/markers/policy/engine/input qualification.
+
+All partial31 files, including the existing checker, remain unchanged as directed.
+Its NORMAL_C_RECEIPT_CONTRACT fail-closed path therefore still blocks formal C
+qualification. This new join is not wired into that gate and cannot bypass it.
+Integration of the boundary remains an implementation gap. No actual Q/C or
+ordinary-gate proof was produced. This is not a new human D05 policy question.
+
+Root runs `normal_c_join_fixtures.py --scratch DIR`: synthetic positive, wrong
+C/M, missing kind, failed check, extra/missing validation ID, task mismatch,
+medium review, missing artifact, wrong approval and missing final. Unexecuted.
+`scratch_fixture_adapter.py --scratch DIR --fixture NAME -- ...` routes preserved
+fixture TemporaryDirectory calls to explicit external scratch and clears inherited
+GIT_* routing. Existing assertions are unchanged; candidate/role fixtures still
+exercise partial31 semantics. No fixture output belongs in source.

docs/plans/original-completion-2026-10-02/execution/p04-01/ORDER_AUDIT.md

@@ -0,0 +1,171 @@
+# P04-01 REPAIR51 canonical handoff
+
+ACTUAL S50 historical evidence complete; S51 docs-only resubmission; S51 native admission pending at worker handoff (fresh native on Q51 required by S-binding, checker:368-371); post-submit admission determined only by Root version-pinned receipts; formal_acceptance false; P04=0.
+
+ACTUAL S50: native6 / 24 phases PASS (historical; bound to S50/Q50).
+ACTUAL S50: collector 15+EV, missing 0 (historical; bound to S50/Q50).
+ACTUAL S50 receipts: build/audit-support/p04-root-acceptance-a9ef681f/.
+ACTUAL S47: full184 retains its original label; conditional reuse only under the existing checker and applicability map. r22 remains historical.
+
+S51 native admission is pending AT HANDOFF. After submission, only Root version-pinned receipts under build/audit-support/p04-root-acceptance-<S>/ and build/p04-evidence/index.json determine admission. Worker-time NOT RUN / UNDETERMINED / unexecuted text below is historical and never a reason to rebuild. Fresh native6 on Q51 is required by S/Q binding, not by that text. No future S51 SHA, Q51 or receipt is claimed.
+
+All six D05 IDs remain approved; pending D05 is empty. PAUSE-REASON: S5B proves same-tick onset from ACTIVE gives RELATED. Power-first then dependency closure shows NO_POWER statically at M facility_service.gd:860-864; that sequential case is EXPLICITLY UNRESOLVED/UNPROVEN under the unchanged approval. It is not a defect, cured, proven, or silently narrowed. The :569 gate preserves P04 safety regardless of label. Any later product change needs a separate owner-authorised task; do not amend the contract or re-ask the owner.
+
+Remaining Root gates:
+
+- Root fixes Q51; compare actual hashes with REPAIR51_APPLICABILITY_MAP.json; stop reuse on executable differences
+- clean exact-Q check-only; capacity and PID check; one heavy lease for fresh native6 on Q51
+- reader/adapters then collector; full184 conditional reuse check; order CLI/complete_B conditional reuse or rerun once
+- index regeneration; one p04-acceptance validate; separate Opus whole-unit independent review
+- prepare / exactC / integration / final / RootDB join / ledger / main push
+- nativeWindows individually pending
+
+Scope: documentation-only repair within the original P04-01/W unit. Original total 30/88, formal 16, P04 credit 0; formal_acceptance false; unit incomplete. No partial credit. See REPAIR51_APPLICABILITY_MAP.json for hashes and reuse conditions.
+
+# Historical, superseded
+
+All older text below, including its current/status headings and worker-time execution statements, is superseded historical material.
+
+## REPAIR49 normal-gate handoff
+
+Required materials: exact B/native-first-current and fresh-run registry; each
+runner-input/ended/source/UID/formal/raw/lifecycle receipt; original recorded Q
+and engine context; B/p04-evidence/runner-materials and RELOCATION.json; matching
+collection/MANIFEST and separate dependency invocation; original full run and
+full_suite binding/raw receipts; final index and invocation receipt; immutable
+authorities in frozen checkout. No raw or historical receipt is rewritten.
+Two-placement identity requires the explicit closure in repair48_identity_controls.py,
+missing-file rejection, and original/A/B complete path/bytes/SHA tables and tree
+hash equality before and after positive execution. See REPAIR49_STATUS.md.
+Submission is followed by new Q freeze, affected pure controls (complete_B included),
+clean exact-Q check-only, capacity/PID checks, one fresh native lease for
+S1/S2a/S2b/S3/S4 and all ten S5 cases, readers/adapters, 15EV collector, full
+verification/binding under the conditions below (or one final full184 if any
+condition fails), index generation, p04-acceptance once, separate Opus whole-unit
+review, normal prepare/C/integration/final/Root DB join/ledger/main push.
+If order-typed fails, preserve its result and stop before heavy execution.
+Only whole-unit acceptance grants credit.
+
+
+## REPAIR49 full184 conditional reuse candidate — all conditions UNVERIFIED
+
+Native reuse is forbidden: all six series require fresh M/S/Q_tree provenance
+(p04_native_series.py:1287; checker:370). Full uses the existing separate binding
+(checker:1175-1186); no adopter or checker change is authorized.
+The following are requirements, not results or approval:
+
+1. New S5 source_before must equal old full selected_source_map: all 1369 keys
+   and SHA values, not counts alone.
+2. Old project_root must remain unchanged: source-start == current source_refs
+   == post-verification source_refs (full_suite_verifier.py:115).
+3. selected_source_map, roster184, parse329, settings, runner/marker module,
+   marker contract, suite-policy and UID plan/stage must all match (116-152,225).
+4. inputs.engine must match current engine_pin (124-125).
+5. Revalidate every phase PID, cleanup, marker and diagnostics (154-228).
+6. Current s5/run_s5_native.py and full_suite_verifier.py SHA must equal the
+   Root rehearsal versions.
+7. Never relabel old S/oldQ/project_root/PIDs/time. Describe reuse only as
+   revalidating the exact-source-identical old full through the existing
+   full_suite route; never claim full ran on new S.
+8. A separate Opus whole-unit review must independently confirm applicability.
+
+Conditions 1–6 require actual checks after final freeze. If any predicate is
+unproved or differs, reject reuse and execute full184 once on the final version.
+SourceRefs (tools/run_all_tests.py:40-45) excludes docs/private package, but that
+fact is no substitute for complete source equality. No reuse is approved here.
+
+
+## REPAIR49 current correction
+
+Source-ready only; original 30/88, formal 16, P04=0, no partial credit.
+REPAIR48's specification-mismatch blocker below is historical and corrected:
+the immutable 7000-byte original has SHA256
+d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f;
+removing its single EOF LF gives
+9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881.
+This is the existing Git/Runner strip/checker one-EOF-LF pin contract.
+No specification, approval or normalization change. Older contradictory wording
+below is superseded history, including blanket full-reuse prohibitions and
+all-controls-unexecuted wording. Q47 admission/index failures remain failures.
+See REPAIR49_STATUS.md for closure audit and verbatim complete_B FileNotFoundError.
+Root handoff reports payload(B), all53, series/join/power PASS; order-typed remains
+UNDETERMINED. Worker did not rerun them. Corrected complete_B remains unexecuted.
+Old native/full successes confer no new-S acceptance or credit.
+
+
+REPAIR48 current source status: see [REPAIR48_STATUS.md](REPAIR48_STATUS.md). Earlier run directions and successes below are historical; they grant no P04 credit.
+
+## RUN47 harness repair; original unit remains unaccepted
+
+Q46 S4 failed before engine startup: `AssertionError: complete 316-script parse roster`.
+Secondary guard: `AssertionError: exact source and planned UID set`. Captured S4
+PIDs: `[]`; phases: `[]`; passed: `false`. No game verification ran. This failure
+is historical reference only, never adopted as a pass. Current S4 admission derives
+exact roster/sets from real selection; check-only and native share it. Import-not-
+attempted cleanup requires the original inventory without generated UIDs.
+REPAIR47_PLAN.json and REPAIR47_STATUS.md supersede earlier current-run count and
+reuse instructions. Immutable spec, REQUIRED/REACH_REFS, product, caps, denominator,
+permissions and historical raw are unchanged. Option B: Root freezes new final Q,
+then fresh all-series runs once; no receipt rewriting or reuse adopter.
+
+# Historical P04-01 order audit — repair31
+
+Formal status is **16/88, P04 credit 0**. Policy approvals are recorded; implementation and exact-Q evidence remain incomplete. No original-unit completion is claimed.
+
+D05 is **six of six actually approved**; adoption into raw enforcement and
+verification are pending. Normal-C qualification now rejects matching-parent/tree
+commits without the authoritative Root/Runner receipt contract. That contract's
+path, SHA256 and provenance verification remain a concrete context gap.
+
+M is `c0ea009b28a7649aca6a433a1a24dc0be5e7ab81`. Source hashes, full product inventory, metadata membership and function line numbers were read from its actual Git tree in [REPAIR30_SOURCE_FACTS.json](REPAIR30_SOURCE_FACTS.json). Product manifest excludes the checker; native/full selected SourceRefs must include it. Q and C do not yet exist for this worker revision.
+
+The four actual human answers are preserved verbatim in [D05_REMAINING_APPROVAL.json](D05_REMAINING_APPROVAL.json), bound to both supplied copies by path and SHA256. Existing dependency, 18:00 and A01 approvals remain unchanged. The candidate documents are superseded history.
+
+| Domain | Approved rule | Current M source | Evidence |
+| --- | --- | --- | --- |
+| 閉店 | D-034 preserves started services on direct closure and releases waiting requests. Dependency closure stops progress and charging, retains reservations/service identity, and completes once after recovery. RELATED_FACILITY_INACTIVE wins over NO_POWER when both apply. | autoload/simulation_runtime.gd:5765 _process_tick_commands; scripts/facility/facility_service.gd:853 _prepare_service_for_tick; autoload/simulation_runtime.gd:12672 _release_closed_business_queues | Fresh Q pending; nativeWindows pending |
+| 停電 | BASELINE:183 covers real mana depletion. Legitimately stopped service has no progress or charge and preserves reservations. D05-P04-PAUSE-REASON makes dependency closure the displayed reason when dependency closure and power loss coincide. | autoload/simulation_runtime.gd:10716 _advance_mana; scripts/facility/facility_service.gd:853 _prepare_service_for_tick | Fresh Q pending; nativeWindows pending |
+| 破壊 | Command destruction precedes completion. Accident/raid destruction follows completion and charging in minute N; that sale remains valid. Failure and reservation release for affected unfinished service occurs in N+1. D05-P04-DESTRUCTION is the authority, not BASELINE:183. | autoload/simulation_runtime.gd:5765 _process_tick_commands; autoload/simulation_runtime.gd:8599 _advance_defense; autoload/simulation_runtime.gd:9826 _apply_defense_outcome_boundary; scripts/facility/facility_service.gd:853 _prepare_service_for_tick | Fresh Q pending; nativeWindows pending |
+| 退出 | D-034 release safety remains. Command exit precedes completion; AI planned exit follows completion and only applies to a deciding guest. Later despawn is distinct. | autoload/simulation_runtime.gd:7575 _execute_leave_facility_queue; autoload/simulation_runtime.gd:8760 _advance_guest_ai_decisions | Fresh Q pending; nativeWindows pending |
+| 課金 | Charge only completed service, once per idempotency key; retain original price snapshot and reservation/ledger joins. At 00:00 prior-day settlement and upkeep precede completion; the sale belongs to the new day. | autoload/simulation_runtime.gd:1876 _advance_facility_upkeep; autoload/simulation_runtime.gd:11817 _complete_service_transaction; autoload/simulation_runtime.gd:11833 _apply_service_transaction; scripts/operations/operations_coordinator.gd:1125 _process_daily_close | Fresh Q pending; nativeWindows pending |
+| シフト交代 | Approved 18:00 order remains: completion and payment before handover. No renewal of prior approval. | autoload/simulation_runtime.gd:8504 _advance_facilities; autoload/simulation_runtime.gd:8680 _advance_staff_ai | Fresh Q pending; nativeWindows pending |
+| 00:00決算 | A01 ownership-based upkeep is unchanged. Prior-day settlement/upkeep precede 00:00 service completion; its sale belongs to the new day. Replay/restore must not duplicate settlement. | scripts/core/simulation_kernel.gd:254 _handle_time_boundaries; autoload/simulation_runtime.gd:1919 _advance_operations_time; scripts/operations/operations_coordinator.gd:882 _process_minute_boundaries; scripts/operations/operations_coordinator.gd:1125 _process_daily_close | Fresh Q pending; nativeWindows pending |
+
+The preserved S1–S4, r22 index, old registered validation and f5 full178 run retain their historical identities. Current runtime deltas conservatively require fresh proof for all 15 conditions plus EV. A test count, approval record or byte-equal ordering function alone does not establish original acceptance. No thresholds or original unknown values are changed.
+
+The eleven phases remain APPLY_COMMANDS, TIME_BOUNDARIES, MANA, CONSTRUCTION, LOGISTICS, FACILITY_COMPLETION, VITALS_AND_ENVIRONMENT, INCIDENTS_AND_EVENTS, FACILITY_QUEUES, AI_DECISIONS, PUBLISH_SNAPSHOT. See the structured audit for preserved phase analysis and the new source manifest for exact M references.
+
+See [CURRENT_STATUS.md](CURRENT_STATUS.md) and [REPAIR31_STATUS.md](REPAIR31_STATUS.md) before any Root execution.
+
+## REPAIR50 source preparation (2026-10-18; no acceptance claim)
+
+The commander handoff reports an identity order mutation on an all-equal array
+(`recent_events/17/payload/current_cell = [0,0,0]`), raw SHA prefix
+`bb0ccb1d…`, and 761.085 seconds elapsed. These are supplied observations,
+not measurements repeated by this worker; the full raw SHA/log remains Root
+material. The old control reversed every multi-element array and classified
+the resulting identical bytes as a negative. The oracle correctly accepted
+that identity. Existing failure records remain unchanged.
+
+REPAIR50 separates byte-identical identity positives from negatives, swaps the
+first unequal typed byte pair, and lists collections with no genuine order
+variant. All AFTER keys/values, journal/body fields and both copied modes
+remain traversed. Type-invalid mutations still require ValueError rejection
+and are also listed as parser rejections; copied records contain the changed
+bytes in both AFTER and EXPECTED even when an intermediate parse is invalid.
+The oracle, adapters, public checker, native-series implementation and R49
+closure roster are unchanged. No Node patch optimization is used.
+
+The temporary expected memo keys full BEFORE/command/guard bytes by SHA256
+and length plus oracle/parser source SHA256. Its cache contains only genuine
+derivation output bytes. It reconstructs fresh Nodes on each return, restores
+the wrapper with finally, and retains verify for each parseable mutation.
+Self-controls compare hit/nonmemo bytes for first/last and each mutated kind,
+require a one-byte BEFORE miss and reject, and check normal/exception cleanup.
+The SHA fixture now streams 1 MiB implementation chunks without changing
+file selection, traversal, relative keys or digest semantics.
+
+Worker validation: AST parsing only; pure, stream, native and formal checks
+are unexecuted. See [REPAIR50_STATUS.md](REPAIR50_STATUS.md) for Root commands,
+static estimation and reuse prerequisites. Original 30/88, formal 16 and P04
+credit 0 remain unchanged; the whole unit is incomplete.

docs/plans/original-completion-2026-10-02/execution/p04-01/P04_ORDER_EVIDENCE_PROTOCOL.json

@@ -0,0 +1,137 @@
+{
+  "schema_version": 1,
+  "scope": "Internal evidence-format design within P04-01 checker work, not a new game rule or acceptance waiver. Missing or unsupported semantic proof must fail.",
+  "input_path": "BUILD_OUTPUT_DIR/p04-evidence/index.json",
+  "required_index_fields": {
+    "schema_version": 1,
+    "task_id": "P04-01",
+    "candidate_commit": "exact candidate Git SHA",
+    "source_map": "repository-relative file to raw SHA256; all observed runtime/kernel/affected service sources required",
+    "environment": "engine path/hash, OS, configuration and inputs raw pins",
+    "artifacts": "unique artifact id to build-relative path/bytes/sha256/type; resolve safely within evidence dir; reject missing, duplicate, symlink, traversal",
+    "domains": "exact7 required domain objects",
+    "authority": "original file raw pin + applicable approved decision refs; pending mandatory rules are errors",
+    "review_status": "pending_review or approved; pending review may pass mechanical stage only if every original evidence predicate passed",
+    "formal_acceptance": false
+  },
+  "required_domains": [
+    "閉店",
+    "停電",
+    "破壊",
+    "退出",
+    "課金",
+    "シフト交代",
+    "00:00決算"
+  ],
+  "domain_fields": {
+    "source_refs": "actual current functions/phase order source pins",
+    "authority_refs": "original/approved refs; implementation observations alone do not authorize a missing rule",
+    "cases": "finite scenario IDs and artifact IDs binding input, before state, delivered operation/clock boundary, after state, producer/consumer PID and unchanged raw save package where applicable",
+    "invariants": "supported predicate descriptors on actual raw JSON observation/state data; not boolean pass claims or test counts",
+    "applicability": "exact source/config/input/environment bindings; old mismatch cannot auto-pass"
+  },
+  "native_receipt_predicates": [
+    "actual owned PID>0; start/end PID identical; exit0 and engine_ended; receipt bound to pinned rawstdout/native logs",
+    "source pins in observation and phase receipt match index and checkout; config/input pins are verified",
+    "where cross-process evidence is claimed, PIDs differ and exact formal save members match producer and consumer pins"
+  ],
+  "invariant_predicate_format": {
+    "artifact_id": "existing pinned raw observation or state artifact",
+    "json_pointer": "RFC6901 JSON pointer into artifact JSON",
+    "operator": "one of eq, nonnegative, distinct, same_literal, count_eq; reject unknown",
+    "expected": "only applicable original/approved rule values or independently computed actual state relationships, never unapproved numeric policy",
+    "paired_artifact_id": "when comparing before/after or restart, required paired pinned raw artifact",
+    "paired_json_pointer": "comparison source if needed",
+    "authority_ref": "original/approved authority for this condition",
+    "raw_origin": "actual engine-produced source or explicit root derivation with each raw input hash and documented formula; unsupported derivation rejected"
+  },
+  "original_invariant_mapping": [
+    "停止が有効な区間のactual service/payment/accounting before-after差が許可されない売上を含まない。停止が未確定D05ならfail。",
+    "同じ00:00境界の精算receiptが1回、同境界再送と再開で資金/台帳が不変。A01時点は承認済み。",
+    "閉店/破壊/退出でlive reservationsとactive targetの対応が一致し、除去/復元後の孤立が0。",
+    "課金の再送/再開で同じservice/payment identityが重複反映されない。",
+    "閉店後serviceとシフト最終区間等の未承認解釈を実装観測だけでpassしない。"
+  ],
+  "fail_closed": [
+    "missing index or mandatory fields",
+    "duplicate keys/IDs, invalid field types or paths",
+    "unknown predicate or unsupported proof source",
+    "raw file hash/size, source/config/input/environment mismatch",
+    "mandatory D05 rule pending or authority missing",
+    "unexecuted proof, incomplete7domain or required boundary coverage",
+    "selfreported pass/test count as substitute for actual state invariants"
+  ],
+  "implementation_note": "Implement this finite mechanical protocol and document exact supported predicates. If evidence is absent, output actual missing IDs and exit nonzero. No requirement to create fake pass evidence. Do not change source/Clock/game numbers; no engine/test run by worker.",
+  "revision": "repair29",
+  "status": "Worker SOURCE-READY / NOTRUN; Root-measured S4r28/local8/r22/schema2 index/registered validation PASS on fb8b; no original acceptance",
+  "accepted_index_schema_versions": [
+    1,
+    2
+  ],
+  "schema2_note": "Current candidate-role/index binding uses the existing schema2 implementation. Legacy field descriptions below are not a replacement schema.",
+  "current_order_table": "order-audit.json",
+  "series_collection": "BUILD_OUTPUT_DIR/audit-support/p04-raw-collect-r22",
+  "power_stop_binding": {
+    "only_series": "S4",
+    "status": "Root-measured S4r28 4/4 PASS; all four owned PIDs ended; guards0 cleanup0",
+    "required_reason": "NO_POWER",
+    "related_facility_operating": true,
+    "kitchen_power_available": true,
+    "global_mana": ">0",
+    "operator_open": true,
+    "formal_points": [
+      "boundary",
+      "held",
+      "recovered"
+    ],
+    "canonicalization": false,
+    "dropped_fields": false,
+    "native_path": "B/p04-s4-native-r28",
+    "controls_path": "B/audit-support/p04-root-fb8b-s4-r01",
+    "PIDs": [
+      49940,
+      50044,
+      50078,
+      50105
+    ],
+    "cause": "probe calls disconnect_nodes directly; isolated NO_POWER, not proof of global depletion",
+    "global_depletion_scope": "Only B1 combined diagnostic observes global depletion; B1 supplies no isolated power_stop or priority approval"
+  },
+  "B1": {
+    "scope": "combined dependency/closure diagnostic only",
+    "power_stop_evidence": false,
+    "priority_approval": false
+  },
+  "D05_power_vs_closure": "pending D05(a); observation RELATED before NO_POWER is not approval; choices in D05_REMAINING_ORDER_CANDIDATE.json",
+  "history": "Creation-time NOT RUN in REPAIR22–28 and runbooks is historical; CURRENT_STATUS.md canonical table overrides execution status. Historical files untouched.",
+  "version_policy": "Full178 used checker f5,21615 checks, exact receipt preserved. No full1339 against a61 exists. Product-only reuse is distinct from current-checker validation. support53cb normal rebind, final full run, independent review and P04-then-support integration on main9b remain Runner steps.",
+  "root_measurements": {
+    "label": "Root-measured",
+    "local8": "B/audit-support/p04-root-fb8b-local-r01 PASS",
+    "collection": "B/audit-support/p04-raw-collect-r22",
+    "index": "B/p04-evidence/index.json schema2; missing_conditions=[];15 conditions + EV verified",
+    "registered_validation": "fb8b PASS28.095s; local-r01/registered-validation.result.json",
+    "native_product": "5f6bc11d",
+    "main": "9b1a18c1",
+    "canonical_status": "CURRENT_STATUS.md",
+    "exact_sha256_pins": "REPAIR29_STATIC_SOURCE.json"
+  },
+  "destruction_stop_binding": {
+    "status": "pending D05",
+    "current_registry_authority": "BASELINE:183",
+    "gap": "mana depletion, not destruction authority",
+    "action": "No checker or registry edits before owner approval; explicit destruction rule and subsequent normal repair required"
+  },
+  "remaining_order_choices": "D05_REMAINING_ORDER_CANDIDATE.json; pending, not applied",
+  "full178_applicability_context": {
+    "selected_map": "B/audit-support/p18-regression-support-final-r01/native-full178/runner-input.json",
+    "difference": [
+      {
+        "path": "tests/business/test_required_kitchen.gd",
+        "current_sha256": "5dcc86d66bdc47003472d6c30d6889eb514e016003265965bdd8496d123d5ca5",
+        "full178_sha256": "3a9c92f80c24064ef0858fba10bd7caab63203932942837f7e142349578f6b2f"
+      }
+    ],
+    "status": "SOURCE-READY / NOTRUN; test-source applicability retained as Runner responsibility; no blanket1338 identity claim"
+  }
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/P04_ORDER_REPAIR_INPUT.md

@@ -0,0 +1,23 @@
+# Runner実行担当からの第1修正入力
+
+これは原ゲーム仕様の変更ではありません。旧Runtimeと差分診断を追加試験入力として供給します。既存監査を再実装せず、技術的な証拠index形式とfailclosed checkerを作成してください。原7領域とD05 pendingを維持します。原条件の証拠欠損は検証失敗です。rootは検証器のsourceを変更していません。
+
+読取専用入力（Runner allocation.build_dir内）:
+- /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/support.json
+- /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/historical-runtime.txt
+
+旧Runtime SHA256: 2d7e2cea5424585e9aa4302ab66d1fc4dbaefe743ce4328fccc1efa2f19b82e4。入力を検証してからdiffしてください。
+
+内部indexの形式設計はspecの検証器作成指示に含まれる技術判断であり、原ゲーム規則の補完ではありません。欠損/古いソース/不正hash/未実行/未定義必須規則は必ず非0にしてください。全証拠が揃わないまま元成果を完了扱いにしないでください。エンジン・全回帰・製品source編集は0。
+
+実際のClaude commanderの記録済み判断:
+
+{
+  "action": "request-repair",
+  "task_id": "P04-01",
+  "reason": "初回Codex blockedの原因は、検証器tools/check_p04_order_evidence.pyが未作成だったこと(missing gate schemaで仕様補完を避けて停止)。これは内部証拠formatの実装判断で、原ゲーム仕様の不足ではない。既存specの検証器作成指示が、元要件を守るfailclosed形式の設計を許可している。repairs=0で、第1repairは残2/2以内。入力は再起動に十分: input.json等のlocal copy、current source pins、14差分(production7とmanaged14を区別、追加7はroot対managedでCRLF→LFのみbyte検証済み、rawSHA差は隠さない)、正確な旧Runtime(SHA 2d7e2cea完全一致)をbuild_dir/audit-support/historical-runtime.txtへraw保存済み。support.jsonとこのtxtを読取専用の追加試験入力として使う(Git変更scopeなし)。repair範囲: (1) 既存のorder-audit.jsonとORDER_AUDIT.mdは保持し、重複作成しない。必要なら最小の追記・訂正のみ。(2) --verify-onlyのcheckerを作成する。BUILD_OUTPUT_DIR/p04-evidence/index.jsonを必須とし、7領域、不変のsource pin、raw proof hash、適用性を検証する。欠損、D05 pending、stale source、未実行proof、自己申告pass、test count単独のpassは非0で終了する。raw証拠が全て不足していてもcheckerは作成する。生証拠を作ったことにはしない。D05は未承認のまま、その不足がある受入をpassにしない。(3) 全回帰・engine実行、ゲームsource変更、Clock・値の変更は0。原7領域/元30/88/部分点なしの受入分母は維持し、仕様変更・分母変更・予算拡大・main統合は含めない。allowed_pathsは検証器と実行ディレクトリ配下に限る。"
+}
+
+追加技術入力: 同じaudit-support内のruntime-diff.patchは旧SHA確認済みRuntimeと現Runtimeのdiff -u出力です。原ソース2件と突合して利用できます。
+
+前回shellのhere-documentは/tmp作成制限で失敗しています。sandbox/権限を変更せず、既存のpython -c等の一時ファイル不要の方式、または許可scopeへのapply_patchを使ってください。前回未読だったこの文書とP04_ORDER_EVIDENCE_PROTOCOL.jsonを最初に読んでください。index形式は技術設計であり、未知ゲーム規則の確定ではありません。D05や証拠不足は非0を維持し、検証器と設計書をsubmittedとして提出することは元成果acceptedではありません。

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR17_STATUS.md

@@ -0,0 +1,92 @@
+# REPAIR17 — blocked on required raw access
+
+This is not accepted or completed. Stage R is not implemented. No new condition
+is claimed as proven. This document records an observed input-access blocker,
+not a replacement implementation or a proposal to trust Root summaries.
+
+## Checkout and scope
+
+- Observed HEAD: `accd07c91d4e34d9b7c7fc20e389df2424b167e1` (the requested reused checkout).
+- Registered contract base: `deb1bcb2374eb378b840ca345db952bd8572cb6e`.
+- Only this status file was created. The checker, `verify_native`, C checks,
+  existing fixtures, probes, originals, and logs were not modified.
+- No git writes, Runner operations, engine runs, or other agents were used.
+
+## Reproduced blocker
+
+Let `B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
+The four `B/<series>/raw/{writer,reader}.json` files are readable. Their literal
+`slots` mappings locate the formal packages. Attempting `Path.read_bytes()` on
+every `journal.log`, `manifest.json`, `thumbnail.png`, and `world.bin` in those
+slots returned `PermissionError: [Errno 1] Operation not permitted`:
+
+| Series | Slots per role | Unreadable original + copy members |
+| --- | ---: | ---: |
+| `p04-s1-native-r02` | 14 | 112 |
+| `p04-s2a-native-r03` | 1 | 8 |
+| `p04-s2b-native-r02` | 6 | 48 |
+| `p04-s3-native-r01` | 22 | 176 |
+
+For example, this exact required S3 original cannot be read:
+
+```text
+/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-078167a92c6e4888a6b4ee4a005fd858-standard-runtime-writer/saves/p04_s3/B1-after/world.bin
+```
+
+Its Reader counterpart is also inaccessible:
+
+```text
+/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-b1fd1956bd28493cbac1e00f3a775232-standard-runtime-reader/saves/p04_s3/B1-after/world.bin
+```
+
+Searching each series directory for `world.bin` found only the unrelated
+`stage/tests/fixtures/required_kitchen_legacy14/formal-package/world.bin`.
+There is no `.review-material` directory in this checkout. Root result SHA
+fields cannot replace re-hashing the actual original and Reader member bytes.
+
+Current-game source access also fails: reading the first source_before entry,
+`/Users/korizatou114/Projects/とりにく工房ゲーム制作部/AGENTS.md`, returned the same error.
+Each run's fixed_input_pins contains three inaccessible entries. The remaining
+entries re-hashed successfully (S1: 13, S2a: 14, S2b: 10, S3: 15).
+Each staged source tree has 1337 hashes matching source_before and one differing
+test script (`tests/s3/test_runtime_staff_assignment.gd`); this is not a proof
+that the current game's full 1338-file source set still matches.
+
+Required unblock: make these declared original inputs readable to the worker,
+or supply an authorized, provenance-bound relocation of their full bytes,
+including both formal roles and the current-game source/fixed inputs. No new
+engine run is requested. Permission denial must not be interpreted as missing
+files, matching hashes, or failed product behavior.
+
+## Evidence and remaining conditions
+
+Readable raw locations were inspected under all four series, including
+runner-input/source_before, lifecycle receipts, raw inventory, and raw Writer
+and Reader records. D05 supplement bytes were read. ROOT result files were
+used to inspect locators, never as proof of passing conditions.
+
+- S1: EV remains unverified in this run; no paid-service power claim.
+- S2a: midnight_settlement, midnight_replay, save_restore remain unverified.
+- S2b: night_staff_absent, overtime_task and same-minute rejection remain unverified.
+- S3: closure_release, exit_release, patience_release and B4 release-once remain unverified.
+- power_stop, destruction_stop, shift_completion, same_minute_replay remain unverified.
+- Existing C verification was neither changed nor rerun; no fresh C result is claimed.
+- Required native-Windows conditions remain pending individually; this run supplies no Windows proof.
+
+Stage A remains pending: actual HEAD + filesystem candidate binding, the known
+`MAIN_ANCHOR` `9694...`, candidate_tree trust, and `3139` metadata holes are
+untouched. No final index or composition was generated.
+
+## Footprint and verification
+
+Read-only `df -h` reported about 3.1 GiB available. No evidence payload was
+copied. `B/audit-support/p04-raw-collect-r17/` did not exist at the access audit
+and was not created. A trustworthy collection footprint cannot be finalized
+without access to the required member bytes; no collector was run.
+
+Only Python read/hash/access diagnostics were executed. Fixture suites were
+not run and are not reported as passing. `p04_native_series.py`,
+`collect_p04_native.py`, and `checker_series_fixtures.py` were not created, so
+there are no valid Root collector/new-fixture commands to advertise yet.
+Implementation and its required positive/adversarial checks remain outstanding
+after the required inputs become readable.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR18_COLLECTOR_OUTPUT.jsonl

@@ -0,0 +1,2 @@
+{"estimated_payload_bytes": 2970454, "files": 5, "available_disk_bytes": 4596576256, "large_payloads_copied": 0}
+{"collection": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-raw-collect-r17", "manifest_sha256": "953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975", "actual_payload_bytes": 2970454, "formal_acceptance": false}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR18_COMBINED_OUTPUT.json

@@ -0,0 +1 @@
+{"C_provenance_sha256": "51d746879b4197445a09cd44a88dd918c365fa98025d9cd652a740cee09a9040", "C_source_manifest_sha256": "dbaab3c293c191eb5f3aff34854945e2d564f824df50a92802b3a7eda55321a8", "error": "candidate binding stage A pending; uncollected original boundaries: power_stop, save_restore, shift_completion", "formal_acceptance": false, "machine_verified": false, "missing_conditions": ["power_stop", "save_restore", "shift_completion"], "nativeWindows": {"EV": "pending", "closure_release": "pending", "dependency_stop": "pending", "destruction_stop": "pending", "exit_release": "pending", "midnight_replay": "pending", "midnight_settlement": "pending", "night_staff_absent": "pending", "overtime_task": "pending", "patience_release": "pending", "paused_midnight": "pending", "power_stop": "pending", "recovery_completion": "pending", "same_minute_replay": "pending", "save_restore": "pending", "shift_completion": "pending"}, "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8", "series_bindings": {"s1": "9792569af9c8ecef177ffdeb880b814fb2878231f23e77c3749e18c228ff0ceb", "s2a": "746b58cf1aff95b082c35f6cc2c29556f146a7c56cce0475f4f2c091168605a7", "s2b": "e6d5412c14809825cf368af1d93972bc9c4e41f4c09afa414732b007c9cc7589", "s3": "a9b4b80d54c18ae2a1dc82514052e22d6174ff79999c76fa622282709759b433"}, "series_manifest_sha256": "953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975", "stage_A": "candidate binding stage A pending", "task_id": "P04-01", "verified_conditions": ["EV", "closure_release", "dependency_stop", "destruction_stop", "exit_release", "midnight_replay", "midnight_settlement", "night_staff_absent", "overtime_task", "patience_release", "paused_midnight", "recovery_completion", "same_minute_replay"]}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR18_REAL_SERIES_OUTPUT.json

@@ -0,0 +1,153 @@
+{
+  "s1": {
+    "facts": {
+      "paid_service_power_claim": false
+    },
+    "formal_acceptance": false,
+    "owned_pids": [
+      64745,
+      64788,
+      64818,
+      64850
+    ],
+    "phase_pairs": 0,
+    "product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
+    "raw_reference_count": 97,
+    "relocated_reference_count": 1464,
+    "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
+    "series": "s1",
+    "source_files": 1338,
+    "verified_conditions": [
+      "EV"
+    ],
+    "verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
+  },
+  "s2a": {
+    "facts": {
+      "paid_originals": {
+        "completed_service_id": "service_00000027",
+        "same_minute_replay": "request resend, not advance_to settlement replay",
+        "shift_completion": "missing: zero SERVICE_SALE rows at 1080",
+        "transaction_id": "ledger_00000085"
+      },
+      "payroll_gold": 255,
+      "raw_getter_bytes_equal": false,
+      "sales_gold": 25,
+      "save_restore_gap": "Raw getter also changes typed arrays to untyped arrays; authorized normalization permits only StringName/String and ordering",
+      "settlement_replay_is_request_resend": false,
+      "upkeep_gold": 5
+    },
+    "formal_acceptance": false,
+    "owned_pids": [
+      85229,
+      85263,
+      85303,
+      85425
+    ],
+    "phase_pairs": 0,
+    "product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
+    "raw_reference_count": 486,
+    "relocated_reference_count": 1362,
+    "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
+    "series": "s2a",
+    "source_files": 1338,
+    "verified_conditions": [
+      "midnight_replay",
+      "midnight_settlement",
+      "same_minute_replay"
+    ],
+    "verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
+  },
+  "s2b": {
+    "facts": {
+      "same_minute_rejection": "MINUTE_ALREADY_APPLIED"
+    },
+    "formal_acceptance": false,
+    "owned_pids": [
+      98696,
+      98744,
+      98770,
+      98810
+    ],
+    "phase_pairs": 12,
+    "product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
+    "raw_reference_count": 163,
+    "relocated_reference_count": 1397,
+    "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
+    "series": "s2b",
+    "source_files": 1338,
+    "verified_conditions": [
+      "night_staff_absent",
+      "overtime_task"
+    ],
+    "verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
+  },
+  "s3": {
+    "facts": {
+      "B1": {
+        "amount": 0,
+        "reservation_states": [
+          "ACTIVE",
+          "RELEASED"
+        ],
+        "sales": 0
+      },
+      "B2a": {
+        "amount": 25,
+        "reservation_states": [
+          "CONSUMED"
+        ],
+        "sales": 1
+      },
+      "B2b": {
+        "amount": 0,
+        "reservation_states": [
+          "RELEASED"
+        ],
+        "sales": 0
+      },
+      "B3": {
+        "amount": 0,
+        "reservation_states": [
+          "RELEASED"
+        ],
+        "sales": 0
+      },
+      "B4a": {
+        "amount": 25,
+        "reservation_states": [
+          "CONSUMED"
+        ],
+        "sales": 1
+      },
+      "B4b": {
+        "amount": 0,
+        "reservation_states": [
+          "RELEASED"
+        ],
+        "sales": 0
+      }
+    },
+    "formal_acceptance": false,
+    "owned_pids": [
+      10448,
+      10493,
+      10523,
+      10578
+    ],
+    "phase_pairs": 352,
+    "product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
+    "raw_reference_count": 891,
+    "relocated_reference_count": 1530,
+    "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
+    "series": "s3",
+    "source_files": 1338,
+    "verified_conditions": [
+      "closure_release",
+      "destruction_stop",
+      "exit_release",
+      "patience_release"
+    ],
+    "verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
+  }
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR18_SERIES_FIXTURE_OUTPUT.json

@@ -0,0 +1,367 @@
+{
+  "formal_acceptance": false,
+  "results": [
+    {
+      "class": "small_synthetic_positive",
+      "result": "pass",
+      "series": "shared"
+    },
+    {
+      "class": "full_body_positive",
+      "result": "pass",
+      "series": "s1"
+    },
+    {
+      "class": "wrong_source_pin",
+      "error": "SHA drift: native /native/body.gd",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "signature_only_pin",
+      "error": "full-function-body pin mismatch",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "symlink",
+      "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "traversal",
+      "error": "raw traversal",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "unmapped_original_path",
+      "error": "unmapped original path: /native/unknown.gd",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "relocated_manifest_native_mismatch",
+      "error": "byte length drift: native /native/body.gd",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "relocated_byte_manifest_mismatch",
+      "error": "SHA drift: relocation /native/body.gd",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "JSON_only_getter_substitute",
+      "error": "unsupported Variant flags 8827:25959 at 0",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "forged_scalar",
+      "error": "SHA drift: p04-s1-native-r02/raw/writer.json",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "changed_raw_byte",
+      "error": "SHA drift: p04-s1-native-r02/raw/writer.json",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "formal_member_SHA_drift",
+      "error": "SHA drift: p04-s1-native-r02/execution.json",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "unowned_missing_PID_end",
+      "error": "missing PID end",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "altered_phase_pair",
+      "error": "SHA drift: p04-s1-native-r02/raw/reader-landing-held.var",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "relabeled_interruption_reason",
+      "error": "SHA drift: p04-s1-native-r02/raw/writer-landing-depleted.json",
+      "result": "rejected",
+      "series": "s1"
+    },
+    {
+      "class": "full_body_positive",
+      "result": "pass",
+      "series": "s2a"
+    },
+    {
+      "class": "wrong_source_pin",
+      "error": "SHA drift: native /native/body.gd",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "signature_only_pin",
+      "error": "full-function-body pin mismatch",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "symlink",
+      "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "traversal",
+      "error": "raw traversal",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "unmapped_original_path",
+      "error": "unmapped original path: /native/unknown.gd",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "relocated_manifest_native_mismatch",
+      "error": "byte length drift: native /native/body.gd",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "relocated_byte_manifest_mismatch",
+      "error": "SHA drift: relocation /native/body.gd",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "JSON_only_getter_substitute",
+      "error": "unsupported Variant flags 8827:25959 at 0",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "forged_scalar",
+      "error": "SHA drift: p04-s2a-native-r03/raw/writer.json",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "changed_raw_byte",
+      "error": "SHA drift: p04-s2a-native-r03/raw/writer.json",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "formal_member_SHA_drift",
+      "error": "SHA drift: p04-s2a-native-r03/execution.json",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "unowned_missing_PID_end",
+      "error": "missing PID end",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "altered_phase_pair",
+      "error": "SHA drift: p04-s2a-native-r03/raw/reader-C3-recall.var",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "relabeled_interruption_reason",
+      "error": "SHA drift: p04-s2a-native-r03/raw/writer-C1-midnight.json",
+      "result": "rejected",
+      "series": "s2a"
+    },
+    {
+      "class": "full_body_positive",
+      "result": "pass",
+      "series": "s2b"
+    },
+    {
+      "class": "wrong_source_pin",
+      "error": "SHA drift: native /native/body.gd",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "signature_only_pin",
+      "error": "full-function-body pin mismatch",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "symlink",
+      "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "traversal",
+      "error": "raw traversal",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "unmapped_original_path",
+      "error": "unmapped original path: /native/unknown.gd",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "relocated_manifest_native_mismatch",
+      "error": "byte length drift: native /native/body.gd",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "relocated_byte_manifest_mismatch",
+      "error": "SHA drift: relocation /native/body.gd",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "JSON_only_getter_substitute",
+      "error": "unsupported Variant flags 8827:25959 at 0",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "forged_scalar",
+      "error": "SHA drift: p04-s2b-native-r02/raw/writer.json",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "changed_raw_byte",
+      "error": "SHA drift: p04-s2b-native-r02/raw/writer.json",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "formal_member_SHA_drift",
+      "error": "SHA drift: p04-s2b-native-r02/execution.json",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "unowned_missing_PID_end",
+      "error": "missing PID end",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "altered_phase_pair",
+      "error": "SHA drift: p04-s2b-native-r02/raw/reader-night_absent-1080-before-facility.var",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "relabeled_interruption_reason",
+      "error": "SHA drift: p04-s2b-native-r02/raw/writer-night_absent-1081.json",
+      "result": "rejected",
+      "series": "s2b"
+    },
+    {
+      "class": "full_body_positive",
+      "result": "pass",
+      "series": "s3"
+    },
+    {
+      "class": "wrong_source_pin",
+      "error": "SHA drift: native /native/body.gd",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "signature_only_pin",
+      "error": "full-function-body pin mismatch",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "symlink",
+      "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "traversal",
+      "error": "raw traversal",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "unmapped_original_path",
+      "error": "unmapped original path: /native/unknown.gd",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "relocated_manifest_native_mismatch",
+      "error": "byte length drift: native /native/body.gd",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "relocated_byte_manifest_mismatch",
+      "error": "SHA drift: relocation /native/body.gd",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "JSON_only_getter_substitute",
+      "error": "unsupported Variant flags 8827:25959 at 0",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "forged_scalar",
+      "error": "SHA drift: p04-s3-native-r01/raw/writer.json",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "changed_raw_byte",
+      "error": "SHA drift: p04-s3-native-r01/raw/writer.json",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "formal_member_SHA_drift",
+      "error": "SHA drift: p04-s3-native-r01/execution.json",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "unowned_missing_PID_end",
+      "error": "missing PID end",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "altered_phase_pair",
+      "error": "SHA drift: p04-s3-native-r01/raw/reader-B1-phase-960-TIME_BOUNDARIES.var",
+      "result": "rejected",
+      "series": "s3"
+    },
+    {
+      "class": "relabeled_interruption_reason",
+      "error": "SHA drift: p04-s3-native-r01/raw/writer-B1-after.json",
+      "result": "rejected",
+      "series": "s3"
+    }
+  ],
+  "scope": "file-only Stage R controls; immutable descriptor and primitive negatives"
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR18_STATUS.md

@@ -0,0 +1,211 @@
+# REPAIR18 — executable Stage R, blocked on remaining conditions
+
+This is **not accepted or completed**. Executable R artifacts and a reference-only
+collection were produced and the file-only checks were run. The whole gate
+fails. Original completion credit remains **13/88**, with no additional credit.
+The repair counter and `max_repair_attempts: null` were not changed.
+
+## Scope and preservation
+
+- Checkout: `accd07c91d4e34d9b7c7fc20e389df2424b167e1`; registered base:
+  `deb1bcb2374eb378b840ca345db952bd8572cb6e`.
+- Changed `tools/check_p04_order_evidence.py` only to add R composition and its
+  separate read-only CLI, call composition from the whole missing-check, and
+  retain an unconditional Stage A failure.
+- Created `p04_native_series.py`, `collect_p04_native.py`,
+  `checker_series_fixtures.py`, this status, and the four output files listed below.
+- All existing checker functions except `verify` and `main` were compared with
+  HEAD and are byte-unchanged, including `verify_native` and all C helpers.
+  All three existing fixture files are byte-unchanged. Their failures were not
+  hidden by editing assertions or Stage A code.
+- `REPAIR17_STATUS.md` was never written. Its SHA256 is
+  `6497c335739f266c9026aa6499cf5c49ae80d590d6aa2d0f90d32adc08018061`.
+- No git writes, new worktree/branch, agents, Runner operations, engine runs,
+  full regression, permission requests, production edits, input edits, or final
+  `B/p04-evidence/index.json` writes occurred. This did not revalidate accd.
+
+## Inputs and actual collection
+
+Here `B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`,
+`R=B/audit-support/p04-r17-full-inputs-r01`, and
+`E=docs/plans/original-completion-2026-10-02/execution/p04-01`.
+
+The first input identity check verified `R/MANIFEST.json`: **1,244,135 bytes**,
+SHA256 `a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8`.
+All **1,721** relocated members were used and rehashed across the series,
+covering 71,488,772 logical bytes. All four complete native `source_before`
+sets equal the supplied 1,338-file product set at content anchor
+`5f6bc11d6bb6e92d22d787989b219fef3a435bc1`. The one native QA override is checked
+separately against its supplied probe bytes; it is not represented as product
+content. Full-function-body pins include trailing comments and declarations.
+
+External original paths remain provenance strings. The resolver uses exact
+`original_to_relocated` keys, and checks each used file against both native
+descriptors and relocation descriptors. There is no prefix substitution or
+external-path fallback. Formal slot membership, directory membership, separate
+Writer/Reader paths and inodes, symlinks, traversal and duplicates are checked.
+All **344** formal members in **86** original/Reader slots were rehashed.
+
+The collector created only `B/audit-support/p04-raw-collect-r17/`. It did not
+exist before creation. It contains four series reference manifests and one
+collection manifest; no large evidence snapshots were copied.
+
+Actual collector output (exit 0):
+
+```json
+{"estimated_payload_bytes":2970454,"files":5,"available_disk_bytes":4596576256,"large_payloads_copied":0}
+{"actual_payload_bytes":2970454,"manifest_sha256":"953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975","formal_acceptance":false}
+```
+
+The estimate was printed before directory creation or output writes. The
+collection is deterministic and refuses an existing destination on rerun.
+Per-series manifests bind native raw references, relocation references, and
+verifier bytes by SHA. Composition reruns C and all series verifiers and
+compares the recomputed results and references with those manifests; editing a
+`verified_conditions` list cannot add credit.
+
+## Conditions derived from literal raw
+
+| Verifier | Native raw | Relocated formal members | Conditions proved |
+| --- | --- | --- | --- |
+| S1 | `B/p04-s1-native-r02/raw/` | `R/formal/p04-s1-native-r02/{writer,reader}/` | `EV` |
+| S2a | `B/p04-s2a-native-r03/raw/` | `R/formal/p04-s2a-native-r03/{writer,reader}/C3/` | `midnight_settlement`, `midnight_replay` |
+| S2b | `B/p04-s2b-native-r02/raw/` | `R/formal/p04-s2b-native-r02/{writer,reader}/` | `night_staff_absent`, `overtime_task` |
+| S3 | `B/p04-s3-native-r01/raw/` | `R/formal/p04-s3-native-r01/{writer,reader}/` | `closure_release`, `exit_release`, `patience_release`, `destruction_stop` (B4b) |
+| Paid/resend supplement, collected with S2a | `B/audit-support/p04-current-native-series-r01/p04-idempotency-paid-midnight-native-r01/order-evidence/` | Manifest pin resolved through `R/MANIFEST.json`, full raw already inside B | `same_minute_replay` (request resend) |
+| Unchanged C | `B/audit-support/native-first-current/` | Existing C bundle, unchanged | `dependency_stop`, `recovery_completion`, `paused_midnight` |
+
+All product reads resolve to `R/product/` through manifest keys. Fixed-input
+relocations and every original formal provenance string are retained in the
+four generated series manifests; they are not replaced with guessed paths.
+
+Owned import/parse/Writer/Reader PIDs checked against starts, ends, owners,
+commands, raw stream hashes, exit gates and cleanup/guard records:
+
+| Series | PIDs | Formal slots per role | Exact raw phase pairs |
+| --- | --- | ---: | ---: |
+| S1 | 64745, 64788, 64818, 64850 | 14 | 0 (14 exact typed snapshot restore points instead) |
+| S2a | 85229, 85263, 85303, 85425 | 1 | 0 (typed settlement/replay and formal Runtime restore comparisons) |
+| S2b | 98696, 98744, 98770, 98810 | 6 | 12 |
+| S3 | 10448, 10493, 10523, 10578 | 22 | 352 JSON/typed phase files |
+
+- S1 checks task/trip/resource identity, safe landing, no-safe-landing hold,
+  preserved reservation identity and release. It makes no paid-service power claim.
+- S2a derives a 25G sale/one transaction, 255G payroll/one transaction
+  (Akane 120, Bardo 135 joined to actual staff and shifts), and 5G upkeep in
+  three rows/one transaction. `advance_to(1440)` has processed minutes 0 and
+  daily closes 0, with entire typed Runtime bytes unchanged. Formal Reader
+  Runtime restore and recall bytes match exactly.
+- The supplemental request-resend raw preserves typed economy, facilities,
+  inventory, guests and staff at the same minute, and joins the one completed
+  service `service_00000027` to sale transaction `ledger_00000085`. This is not
+  settlement-replay proof; S2a supplies that distinct proof.
+- S2b derives `STAFF_UNAVAILABLE`/`WAITING_FOR_STAFF`, the absent night workers,
+  overtime task/staff/shift joins and one duty minute. Its same-minute call is
+  rejected as `MINUTE_ALREADY_APPLIED`, with entire typed Runtime unchanged.
+- S3 retains `RELATED_FACILITY_INACTIVE` in B1, never relabeling it `NO_POWER`.
+  The directly closed facility retains its started service while the dependent
+  facility interruption pauses it; the queued reservation is released.
+  B2a completes/consumes once; B2b and B3 release without a sale.
+  B4b's queued event completes, durability becomes 0/`BROKEN`, then the service
+  fails with `BROKEN` at 961, releases its reservation and has zero sale rows.
+
+## Unresolved raw/specification gaps
+
+1. **`power_stop` missing.** EV evidence is not a paid-service power proof;
+   B1 is a dependency interruption. No relabeling or invented D05 rule was used.
+2. **`shift_completion` missing.** The actual supplied paid-shift originals at
+   `B/audit-support/p04-current-native-series-r01/p04-paid-shift-midnight-native-r01/order-evidence/`
+   have zero `SERVICE_SALE` rows in all three 17:59/completion-phase/18:00
+   snapshots. The `paid` filenames do not establish a charged completion at 1080.
+3. **`save_restore` withheld under the fixed normalization restriction.** The
+   entire formal Runtime does restore exactly. However, the getter comparison
+   changes not only StringName/String and dictionary order but typed arrays to
+   untyped arrays. Examples are `/anomalies`, `/anomalies/0/allocations`,
+   `/anomalies/0/unallocated_by_staff`, `/anomalies/0/facility_ids`,
+   `/settlement/input_payments` and `/settlement/rows`. Native array headers
+   include `1c000100...` versus `1c000000...`. The raw getter byte inequality is
+   preserved and parsed from `.var`; JSON is not substituted. Normalization was
+   not broadened beyond the instruction, so this condition remains missing.
+4. **B4a zero-charge assertion is unsupported.**
+   `B/p04-s3-native-r01/raw/writer-B4a-next.{json,var}` contains one 25G sale at
+   960 and a completed service with consumed reservation. B4b has zero sales.
+   The implementation records both facts, rather than declaring B4a charge 0.
+   Destruction-stop credit above is specifically the B4b failed-service branch.
+
+D05 approval and supplement full bytes in `p04-whole-closure-r01` were read.
+They approve dependency closure and the 18:00 ordering choice, not an invented
+blanket policy for all D05 domains. The supplied raw discrepancies require
+owner-level resolution or appropriate evidence; this worker did not amend scope.
+
+Each of these native-Windows conditions remains individually **pending**:
+`EV`, `power_stop`, `destruction_stop`, `dependency_stop`, `shift_completion`,
+`recovery_completion`, `same_minute_replay`, `closure_release`, `exit_release`,
+`patience_release`, `paused_midnight`, `midnight_settlement`, `midnight_replay`,
+`save_restore`, `night_staff_absent`, `overtime_task`. The machine output also
+contains an explicit per-condition pending map.
+
+## Actual validation outputs
+
+- Static Python compilation: **4 files passed** (in-memory compile; no engine).
+- Existing C fixture: **exit 0**, 5 positive controls passed and 25 negatives
+  rejected. `verify_native` reports 10 owned processes and its original three
+  conditions. No C condition names were edited.
+- Existing negative fixture: **exit 1**, at `synthetic_scalar_only_rejected`:
+  `AssertionError: ('synthetic_scalar_only_rejected', {'task_id': 'P04-01', 'machine_verified': False, 'formal_acceptance': False, 'error': "'product_binding'"})`.
+- Existing applicability fixture: **exit 1**:
+  `AssertionError: negative fixture accepted: wrong_tested_revision`.
+  These two suites therefore could not be confirmed to pass/reject as requested.
+  Their files and the functions involved were unchanged; they were not repaired
+  by touching the deferred A holes, and no baseline rerun is claimed.
+- New series fixtures: **exit 0**, **5 small positive controls and 56 rejected
+  negatives**, 14 negative classes per series. Controls cover immutable raw and
+  descriptor overlays, source/body pins, PID endings, paths, relocation byte
+  drift and typed-vs-JSON rejection. Immutable descriptor hashes are deliberately
+  not refreshed; the tests do not claim to be new engine evidence.
+- Real series verifiers ran successfully during collection and were rerun by
+  composition. Outputs are recorded in `REPAIR18_REAL_SERIES_OUTPUT.json`.
+- Separate composition CLI: **exit 1**, with 13 raw-derived conditions and:
+
+```text
+candidate binding stage A pending; uncollected original boundaries: power_stop, save_restore, shift_completion
+```
+
+Full new outputs: `REPAIR18_COLLECTOR_OUTPUT.jsonl`,
+`REPAIR18_SERIES_FIXTURE_OUTPUT.json`, `REPAIR18_REAL_SERIES_OUTPUT.json`,
+`REPAIR18_COMBINED_OUTPUT.json`. The 13 verified boundary conditions are not
+13 newly accepted units and do not change the original 13/88 credit.
+
+## Exact Root commands
+
+Run from this existing checkout. These commands perform file-only work:
+
+```sh
+B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build
+E=docs/plans/original-completion-2026-10-02/execution/p04-01
+python3 -B "$E/collect_p04_native.py" --build "$B"
+python3 -B "$E/checker_series_fixtures.py" --build "$B"
+python3 -B "$E/p04_native_series.py" --build "$B"
+python3 -B "$E/checker_negative_fixtures.py"
+python3 -B "$E/checker_applicability_fixtures.py" --native-bundle "$B/audit-support/native-first-current"
+python3 -B "$E/checker_native_fixtures.py" "$B/audit-support/native-first-current"
+BUILD_OUTPUT_DIR="$B" python3 -B tools/check_p04_order_evidence.py --verify-series-only
+```
+
+The collector command above was already executed successfully; another execution
+must refuse the now-existing destination. Review the existing collection rather
+than overwriting it. The final command is intentionally failing; it does not
+need or generate a final index and never performs candidate composition.
+
+## Stage A and subsequent dependencies
+
+Stage A remains pending: actual HEAD/filesystem candidate binding,
+`MAIN_ANCHOR` `9694...`, `candidate_tree` trust and the `3139` metadata holes
+are untouched. `--verify-only` still requires the actual final evidence index;
+its missing-check unions recomputed C/R results and still fails for any missing
+condition, and it cannot succeed while Stage A is pending.
+
+Required sequence remains **R → A → final index → mandatory whole validation →
+independent review → ordinary integration**. Outstanding raw/specification gaps
+and the two existing fixture failures prevent representing this dispatch as a
+completed or accepted implementation.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR19_CORRIGENDUM.md

@@ -0,0 +1,58 @@
+# Repair19 persistence explanation corrigendum
+
+This corrects the old Root explanation that the live day-summary comparison
+differed only in StringName/String and dictionary order. That explanation missed
+generic Array headers. It also corrects the superseded proposal to explain this
+path using `_to_snapshot_variant`.
+
+The exact relocated source is
+`B/audit-support/p04-r17-full-inputs-r01/product/scripts/operations/operations_coordinator.gd`.
+Its 130891 bytes have SHA256
+`871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90`.
+Full bodies, including bytes through the next named function, were read directly
+and compared with `T/ROOT_ACTUAL_PERSISTENCE_CALL_CHAIN.json`, where
+`T=B/audit-support/p04-repair19-close-r01`. All five bodies, lengths and hashes
+match that supplied file:
+
+| Function | Line | Bytes | SHA256 |
+| --- | ---: | ---: | --- |
+| `get_day_summary` | 577 | 153 | `449eef926054cf76c39d6b4c016da3d775d41f2b343b4f8ad57b62c594cb32bb` |
+| `create_snapshot` | 620 | 3988 | `8c6e4f000e6df6f0f996445a57c4c17223cae4e1df57a9c2e3a605cf4d9f5309` |
+| `_snapshot_root_report` | 2943 | 2062 | `96084d76beeac11d165753a82160f789cd47b4dec4b6bb8cd6599a4f5ed08efe` |
+| `_visit_snapshot_tree` | 2992 | 3045 | `70792369c05882b813632a3c96f934928e9a089d420700cfc0d4c8fa971972a0` |
+| `_to_snapshot_variant` | 3083 | 550 | `f7db3cf2d495bb117fc7f6795633daa272c03d8eb7f99977e462e0a9df20cd8a` |
+
+`get_day_summary` returns `_day_summaries[day].duplicate(true)` directly. It
+exposes an internal API representation; the product getter need not change.
+`create_snapshot` first validates with capture=true. In that pass,
+`day_summaries` is not among the reusable encoded fields. It then assembles
+`saved_days` and calls `_snapshot_root_report(raw_snapshot, field_cache, false)`.
+That report invokes `_visit_snapshot_tree` with encoding enabled. The visitor
+creates untyped arrays, converts StringName to String, stringifies permitted
+dictionary keys and sorts the resulting String keys with native sorting.
+
+The separate `_to_snapshot_variant` helper is not on this call chain. Its
+`sort_custom(_variant_string_less)`, lack of finite-float/budget checks and
+pass-through of unsupported types prevent using it as a general equivalent.
+
+The supplied `T/ROOT_S2A_TYPED_ARRAY_HEADER_AUDIT.json` lists the following six
+changes. These are explicitly attributed to that diagnostic; they have not been
+independently rerun by a repair19 fixture in this dispatch.
+
+| Path below `day_summary` | Writer header | Writer element kind | Reader header | Length |
+| --- | --- | --- | --- | ---: |
+| `/anomalies` | `1c000100` | Dictionary (27) | `1c000000` | 1 |
+| `/anomalies/0/allocations` | `1c000100` | Dictionary (27) | `1c000000` | 1 |
+| `/anomalies/0/facility_ids` | `1c000100` | String (4) | `1c000000` | 3 |
+| `/anomalies/0/unallocated_by_staff` | `1c000100` | Dictionary (27) | `1c000000` | 0 |
+| `/settlement/input_payments` | `1c000100` | Dictionary (27) | `1c000000` | 5 |
+| `/settlement/rows` | `1c000100` | Dictionary (27) | `1c000000` | 5 |
+
+Every listed Reader array is untyped. Raw getter byte equality remains **false**.
+This diagnostic is separate from the source-defined persisted snapshot.
+Neither this explanation nor an optional projection may weaken exact native
+expected/restored typed-byte comparison, entire Runtime equality, formal 4+4
+member equality, settlement counts, duplicate-payment checks or replay checks.
+No projection implementation or new save_restore verification is claimed here.
+The executable R18 normalization gate is still unchanged, so save_restore is
+still open pending the exact encoder port and its required validation.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR19_STATUS.md

@@ -0,0 +1,78 @@
+# Repair19 — incomplete; execution constraint clarification pending
+
+This is not a ready submission and not formal acceptance. Original credit stays
+13/88. All 15 conditions plus EV retain their existing scope; nativeWindows
+remains pending for each. No product, acceptance, domain or outcome was changed.
+
+## Blocking instruction conflict
+
+The recorded repair19 direction requires local fixture reruns, isolated temp-Git
+negative and positive controls, and removing the Stage-A refusal only after
+those tests pass. The final worker instructions prohibit Git writes and say
+tests are formally executed by Runner. This dispatch has requested clarification
+on whether that prohibition exempts the specifically requested file-only and
+isolated temp-Git fixtures. There is no answer at the time of this report.
+No exemption has been assumed. This is an execution-constraint blocker, not a
+claim that pending formal acceptance itself blocks implementation.
+
+## Changes actually made in this dispatch
+
+- `p04_native_series.py`: retain both JSON and Variant Writer/Reader phase-byte
+  comparisons, but increment the S3 pair metric only for `.var`. The requested
+  interpretation is 352 checked file pairs representing 176 observations. A
+  new execution output confirming that count has not been generated.
+- `p04_native_series.py`: add the B1 `power_stop` join for the five observations
+  at 959–963, positive finite original reserve, actual public mana and power
+  flags, direct closure, same service identity/progress/reservations, queued B
+  release/stock/patience, recovery payment and unchanged next ledger. Bind the
+  saved 961 recovery command and the APPLY_COMMANDS phase. Preserve the actual
+  `RELATED_FACILITY_INACTIVE` reason. This code is untested; its addition to the
+  verifier's returned conditions is conditional on every assertion succeeding
+  when Runner executes it. No successful power_stop result is claimed here.
+- `REPAIR19_CORRIGENDUM.md`: correct the StringName/order-only explanation,
+  distinguish raw getter from public persistence, list all six supplied typed
+  Array header changes, and record the actual source call-chain full-body pins.
+
+## Static observations and preservation
+
+- In-memory Python `compile` of the edited series module succeeded. No fixture,
+  native, Godot, full-regression or Runner run occurred.
+- The exact relocated operations source was read. All five complete function
+  bodies, lengths and hashes equal
+  `B/audit-support/p04-repair19-close-r01/ROOT_ACTUAL_PERSISTENCE_CALL_CHAIN.json`.
+  The hash table and exact call-chain explanation are in the corrigendum.
+- The checker region from `NATIVE_RUNS` through `verify_native`, inclusive of
+  the C constants and helpers, equals its HEAD bytes. Region SHA256:
+  `5d778b3cfab7c139ca03812489508ce9aae90c1d17f8c2249c340f30d1496b3b`.
+- No R17/R18 output or status file was edited. The existing uncommitted R18
+  checker changes remain. No Git write, agent, integration or Runner operation
+  occurred. No native evidence was created or modified.
+- No collector was run. Both the existing r17 collection and the required fresh
+  r19 destination remain untouched by this dispatch. Since the series verifier
+  bytes changed, the old r17 collection cannot validate these new verifier bytes;
+  it must never be overwritten or represented as a repair19 collection.
+
+## Remaining implementation and validation
+
+Repair19 is incomplete. R2's C-backed paid shift join, R3's exact encoder port
+and fixtures, Stage A's actual Git-role verifier, new index generator, fixture
+protocol repairs and all requested fixture executions remain to be completed.
+The old Stage-A unconditional refusal remains in place. The old
+`verify_product_target` has not been edited or replaced in this dispatch.
+The 9b1a18c anchor resolves to
+`9b1a18c1eb25ca1300dcd59da78423c0dda2f498`; the old checker constant has not yet
+been changed as part of a complete Stage-A repair.
+
+No new output JSON is reported, and no old fixture success is reused as success
+for the edited module. B4a/B4b semantics, frozen save_restore measurements and
+its current open result remain unchanged. The 25 C negatives and 56 series
+negatives have not been rerun.
+
+There are no valid repair19 index-generation or submitted/merged-candidate Root
+commands yet: the required generator and role verifier are not implemented.
+Providing plausible commands for nonexistent functionality would be misleading.
+The completed follow-up must supply those exact commands after implementing and
+validating the protocol, retain all existing outputs, and collect exclusively
+into the fresh `B/audit-support/p04-raw-collect-r19` destination.
+
+Here `B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR20_CORRIGENDUM.md

@@ -0,0 +1,40 @@
+# Repair20 persistence corrigendum
+
+The old Root explanation, “StringName/order only”, omitted six generic Array
+header changes. `get_day_summary` returns the internal day's `duplicate(true)`;
+it does not return the canonical persisted representation. Its raw Writer and
+Reader bytes remain unequal. All original raw files and values are retained.
+No product getter change is proposed.
+
+| Path under day_summary | Writer header | Element kind | Reader header | Length |
+| --- | --- | --- | --- | ---: |
+| anomalies | 1c000100 | Dictionary (27) | 1c000000 | 1 |
+| anomalies/0/allocations | 1c000100 | Dictionary (27) | 1c000000 | 1 |
+| anomalies/0/facility_ids | 1c000100 | String (4) | 1c000000 | 3 |
+| anomalies/0/unallocated_by_staff | 1c000100 | Dictionary (27) | 1c000000 | 0 |
+| settlement/input_payments | 1c000100 | Dictionary (27) | 1c000000 | 5 |
+| settlement/rows | 1c000100 | Dictionary (27) | 1c000000 | 5 |
+
+These are the six entries in `T/ROOT_S2A_TYPED_ARRAY_HEADER_AUDIT.json`.
+The new code derives them again from typed nodes and compares the list to that
+diagnostic. This execution is **NOT RUN** in repair20.
+
+The persistence chain is `create_snapshot` (620) →
+`_snapshot_root_report(raw_snapshot, field_cache, false)` (2943) →
+`_visit_snapshot_tree(..., encode=true)` (2992). The earlier capture=true pass
+does not cache encoded day_summaries. `_to_snapshot_variant` is not on this path.
+
+The projection is confined to raw getter → persisted day1. It retains all
+scalar Variant bytes, including numeric type, rejects nonfinite floats and
+unsupported values, stringifies permitted keys, rejects canonical collisions,
+sorts String keys, rebuilds untyped Arrays, and enforces collection, depth, node,
+single-string and aggregate-string limits. Unsupported dictionary-key types
+are rejected, never silently normalized. The optional admitted subset does not
+include composite-key Godot stringification. No projection is allowed on the
+native persisted expected/restored comparison.
+
+Full Runtime Writer/Reader/restored equality, formal 4+4 member equality,
+settlement/duplicate-payment checks and the actual advance_to replay checks
+remain independent strict requirements. If getter projection still differs
+from the native canonical_day1 bytes, `save_restore` remains open and reports
+that exact mismatch. No new successful equality is claimed without Root's run.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR20_STATUS.md

@@ -0,0 +1,183 @@
+# Repair20 — source submission; tests NOT RUN
+
+Source-only repair. No Git command, fixture, collector, series, Godot/native,
+Runner, agent, commit, branch or integration operation was executed. The only
+code validation performed was Python `compile(..., 'exec')` in memory, without
+imports/execution of the edited modules. No acceptance is claimed. Original
+credit remains 13/88; all 15 conditions + EV, seven domains and three safety
+outcomes retain their scope. nativeWindows remains pending for every condition.
+The next submission SHA is assigned by Runner and is not predeclared here.
+
+Changed files:
+
+- `tools/check_p04_order_evidence.py`: real checkout/role binding, isolated
+  object stores under B, first-1080 R2 join, schema2 recomputation and r20 collection.
+- `p04_native_series.py`: B1 departure/despawn/full-state joins, explicit 352/176
+  S3 checks, confined getter projection, persistence pins and six-header diagnostic.
+- `collect_p04_native.py`: exclusive new collection at
+  `B/audit-support/p04-raw-collect-r20`.
+- `checker_negative_fixtures.py`: retain existing content-case IDs and meanings;
+  isolate their content layer explicitly in the test harness, while the separate
+  real-Git fixture exercises production role binding without a bypass.
+- New `build_p04_index.py`, `checker_role_fixtures.py`,
+  `checker_encoder_fixtures.py`, `checker_join_fixtures.py`.
+- New `REPAIR20_STATUS.md` and `REPAIR20_CORRIGENDUM.md`.
+
+In-memory compilation: all eleven Python files (checker plus ten modules in E)
+compile. This is syntax validation only; every test below is **NOT RUN**.
+The retained C region, `NATIVE_RUNS` through `verify_native`, is byte-for-byte
+equal to T's retained source, SHA256
+`5d778b3cfab7c139ca03812489508ce9aae90c1d17f8c2249c340f30d1496b3b`.
+`verify_product_target` itself is also byte-for-byte retained and no longer called.
+Existing repair17/18/19 status, corrigendum, raw outputs and T's retained archives
+were not modified. Existing C 25 negatives and series 56 negatives remain required.
+
+## R3 source pins
+
+Product source: `scripts/operations/operations_coordinator.gd`, 130891 bytes,
+SHA256 `871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90`.
+Runtime verification checks the complete bodies and cross-checks the actual
+body bytes, lengths and hashes against `T/ROOT_ACTUAL_PERSISTENCE_CALL_CHAIN.json`.
+
+| Function | SHA256 |
+| --- | --- |
+| get_day_summary | 449eef926054cf76c39d6b4c016da3d775d41f2b343b4f8ad57b62c594cb32bb |
+| create_snapshot | 8c6e4f000e6df6f0f996445a57c4c17223cae4e1df57a9c2e3a605cf4d9f5309 |
+| _snapshot_root_report | 96084d76beeac11d165753a82160f789cd47b4dec4b6bb8cd6599a4f5ed08efe |
+| _visit_snapshot_tree | 70792369c05882b813632a3c96f934928e9a089d420700cfc0d4c8fa971972a0 |
+
+The corrigendum lists all six Array header changes. Native persisted comparisons
+are direct typed-byte comparisons. Raw getter inequality remains diagnostic.
+The optional projection admits only the supported persistence subset; unsupported
+composite dictionary keys fail closed. Its negative controls include field loss,
+extra fields, both numeric-type directions, value changes, nonfinite floats,
+invalid keys, collisions, unsaveable values, wrong call chain and use on native
+persisted comparisons. The positive changes only Array headers and StringName.
+
+## Condition disposition on this untested source
+
+No condition is newly proven by this dispatch. All tests are **NOT RUN**.
+
+| Condition | State and reason pending Root execution |
+| --- | --- |
+| power_stop | Open: new B1 959–963 join; real B at 959/960, normal recorded departure then absence, unchanged one-time release, stock 1, wallet 50, no B charge; recovery 25 at 962 and no extra 963 charge. |
+| destruction_stop | Pending: retained S3 B4b BROKEN failure and zero-sale/release predicates. |
+| dependency_stop | Pending: unchanged C paused service identity/progress/reservation proof. |
+| shift_completion | Open: new C first-1080 join; PIDs 77462/77504/77536 ended, 1338-file content 5f, 44→45, ledger_00000006/25G, DAY2 present before handover and zero after, no extra at 1081. |
+| recovery_completion | Pending: unchanged C recovery transaction/idempotency join. |
+| same_minute_replay | Pending: retained real paid request-resend join; never substituted for settlement replay. |
+| closure_release | Pending: retained S3 closure/release plus despawn-aware B1 checks. |
+| exit_release | Pending: retained S3 B2 release/completion ordering. |
+| patience_release | Pending: retained S3 B3 patience expiration and release. |
+| paused_midnight | Pending: unchanged C paused-midnight series. |
+| midnight_settlement | Pending: retained S2a nonzero sales/payroll/upkeep/duty joins. |
+| midnight_replay | Pending: actual advance_to replay, zero processed minutes and zero daily closes, exact Runtime bytes. |
+| save_restore | Open: direct full typed Runtime and formal 4+4 equality remain mandatory; optional getter projection must equal actual persisted day1. A remaining mismatch is explicitly reported, never projected out of native restore. |
+| night_staff_absent | Pending: retained S2b WAITING_FOR_STAFF at 1081. |
+| overtime_task | Pending: retained S2b interrupt-level-zero task/staff/shift and once-only duty joins. |
+| EV | Pending: retained S1 reachable reserved staff power-stop proof and pinned static chain. |
+
+Stage A is implemented but **NOT RUN**. Submission is inferred from actual Git
+ancestry and scoped diff; the composed product is labelled prospective, not a
+tested worker game. Integration/final requires an actual two-parent merge and
+exact recomputed merge tree, native product map/modes and submitted checker/doc
+patch. Every tracked file and executing module must match HEAD bytes/mode;
+untracked/ignored files and symlinks fail. Unknown/deleted sources and candidate,
+code-only or phase declarations cannot authorize a role. Metadata membership
+comes from the real 9b1a18c tree, without the old count assumptions.
+
+Schema2 retains native source/config/input/environment, real lifecycle PIDs,
+formal proofs, complete raw references, authority and original-audit uncertainty,
+domain and reachability mappings. Its entire payload is recomputed from raw by
+the same checker. It contains no candidate==HEAD pin or Root-passed flag.
+`generation-invocation.json` separately records the actual invocation/HEAD.
+
+## Root execution order (all commands below NOT RUN)
+
+Run from the clean, actual auto-submitted checkout. Root supplies actual clean
+merged/final checkout paths later; do not substitute invented SHAs. Preserve all
+prior output directories and use exclusive fresh output destinations.
+
+```sh
+export B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build
+export E=docs/plans/original-completion-2026-10-02/execution/p04-01
+export BUILD_OUTPUT_DIR="$B"
+export PYTHONDONTWRITEBYTECODE=1
+```
+
+1. Local file-only and fixture controls on the actual new SHA:
+
+```sh
+python3 "$E/checker_negative_fixtures.py"
+python3 "$E/checker_applicability_fixtures.py" --native-bundle "$B/audit-support/native-first-current"
+python3 "$E/checker_native_fixtures.py" "$B/audit-support/native-first-current"
+python3 "$E/checker_series_fixtures.py" --build "$B"
+python3 "$E/checker_encoder_fixtures.py"
+python3 "$E/checker_join_fixtures.py" --build "$B"
+```
+
+2. Real series against B, then the exclusive r20 collection:
+
+```sh
+python3 "$E/p04_native_series.py" --build "$B"
+python3 "$E/collect_p04_native.py" --build "$B"
+```
+
+3. After auto-submit, generate the fresh normal Runner index. B/p04-evidence was
+absent at static inspection. If it is now occupied, retain it and choose an
+explicit fresh directory with P04_EVIDENCE_DIR for manual checks; do not overwrite.
+The normal Runner uses B/p04-evidence and must receive that actual generated index.
+
+```sh
+python3 "$E/build_p04_index.py" --build "$B" --output "$B/p04-evidence" \
+  --invocation validate \
+  --registered-ref deb1bcb2374eb378b840ca345db952bd8572cb6e \
+  --tested-ref 5f6bc11d6bb6e92d22d787989b219fef3a435bc1
+```
+
+4. Checker on submitted, merged and final actual checkouts. Real temp-Git fixtures
+need the generated index, so their execution follows step 3, not a fabricated
+pre-submission index. They create throwaway repositories/objects only under B.
+
+```sh
+python3 "$E/checker_role_fixtures.py" --build "$B" --evidence "$B/p04-evidence"
+python3 tools/check_p04_order_evidence.py --verify-only
+python3 "$P04_MERGED_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
+python3 "$P04_FINAL_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
+```
+
+The same index works in all three roles. For separate invocation records, the
+generator also accepts `--invocation prepare-integration` and `--invocation final`
+with explicit fresh output paths while executing from those actual checkouts.
+These labels are receipt metadata and grant no role. Root must respect the normal
+Runner state machine: its prepare_integration requires prior formal review.
+An isolated local prospective-merge control does not replace that review or move
+Runner state. `runner.validate("P04-01")`, `runner.prepare_integration("P04-01")`
+and `runner.integrate("P04-01")` remain Root operations only.
+
+5. Mandatory whole validation and full 178-game regression once on exact final
+sources. The supplied Runner core exposes
+`runner.verify("P04-01", final_checkout, actual_final_sha, "final")`; retain every
+configured mandatory validation, then run the existing guarded full-game runner:
+
+```sh
+python3 "$P04_FINAL_CHECKOUT/tools/run_all_tests.py" \
+  --project-root "$P04_FINAL_CHECKOUT" --output "$B/p04-final-product-full-r01"
+```
+
+Do not change timeout, marker contracts or suite policy, splice phases, or reuse
+historical 177-suite proof. Confirm the final selected source map and 178-suite
+roster, and preserve source/default-profile invariance. This command is the one
+full run, not permission for an additional `make test` native run.
+
+6. Independent Opus review using Root's existing reviewer route, with exact
+source/validation materials mirrored into the frozen checkout's .review-material.
+The supplied core's formal method is `runner.review("P04-01")`; that method reviews
+the actual submitted revision and requires its validation evidence. Any additional
+final-composition Opus review must explicitly receive the actual final revision.
+The external commander/Opus CLI entry point and installed Runner configuration
+were not supplied in this checkout, so no guessed shell command is asserted for
+them. Root retains its existing formal validation/review/integration workflow.
+
+The absent external entry-point/configuration details are handoff context gaps,
+not evidence of a pass, and not a blocker solely because Root testing is pending.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR21_STATUS.md

@@ -0,0 +1,95 @@
+# Repair21 — source submission; tests NOTRUN
+
+P04-01 source-only performance repair. Changes are restricted to the checker,
+the new `bulk_reader_equivalence.py` fixture, and this status file. No Git
+command, test, fixture, collector, Runner, native/Godot run, agent, commit,
+branch or integration operation was executed by the worker.
+
+`read_blobs` validates full lowercase 40-hex OIDs before starting a process,
+deduplicates/sorts them, and uses one `git cat-file --batch` process per nonempty
+request. Empty requests start no process. `check_output` inherits stderr and
+raises for nonzero exit status just like `git_bytes`. The separately injectable
+byte parser verifies ordered OIDs, blob type, decimal size, exact framing and
+complete output consumption. There is deliberately no blob cache, so no object
+can be reused across `_GIT_ENV` namespaces. The two bulk call sites preserve
+selected-path sorted manifests and every actual-file byte/mode comparison.
+
+No existing require message or assertion was removed. The `NATIVE_RUNS` through
+`verify_native` region, commit-type checks, ancestry, merge-tree isolation,
+status/untracked/symlink/module checks, schema/encoder, six existing suites and
+role case IDs were not edited. Checker self-blob reads remain unchanged.
+
+The fixture source covers binary NUL/CR/LF/trailing LF, empty and large blobs,
+unicode `ls-tree -z` path resolution, duplicates, empty input, malformed/short
+OIDs, missing objects, tree/commit objects, invalid/truncated/oversized/garbage
+responses, process failure, one-process sorted input, and private object
+visibility inside versus outside and across isolated namespaces. It has not run.
+
+Static validation: `ast.parse` and in-memory `compile(..., 'exec')` completed for
+the checker and new fixture. Neither module was imported or executed. This is
+syntax validation only. Tests: **NOTRUN**. Runtime equivalence and completion
+within the registered 180 seconds remain for Root to measure.
+
+The existing schema2 index at B/p04-evidence/index.json was read as data, along
+with the existing builder and role fixture. Its registered/execution/tested
+roles remain deb1bcb/9767b0a/5f6bc11 and original_credit remains 13/88.
+The existing index and r20 collection are untouched. No new generation is
+needed if Root confirms the recomputed payload is identical. If generation is
+needed, use a new explicit destination, never overwrite existing evidence.
+Original P04-01 remains incomplete; criteria and nativeWindows pending status
+are unchanged. No original credit or acceptance is claimed.
+
+## Root execution order — all NOTRUN
+
+Use the clean new auto-submitted checkout, whose SHA is assigned after this
+source submission. Do not use the registered base SHA as the new submission.
+
+```sh
+export B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build
+export E=docs/plans/original-completion-2026-10-02/execution/p04-01
+export BUILD_OUTPUT_DIR="$B"
+export PYTHONDONTWRITEBYTECODE=1
+python3 "$E/bulk_reader_equivalence.py"
+python3 "$E/checker_negative_fixtures.py"
+python3 "$E/checker_applicability_fixtures.py" --native-bundle "$B/audit-support/native-first-current"
+python3 "$E/checker_native_fixtures.py" "$B/audit-support/native-first-current"
+python3 "$E/checker_series_fixtures.py" --build "$B"
+python3 "$E/checker_encoder_fixtures.py"
+python3 "$E/checker_join_fixtures.py" --build "$B"
+python3 "$E/checker_role_fixtures.py" --build "$B" --evidence "$B/p04-evidence"
+```
+
+Next run the registered validation on the **new auto-submitted SHA**, retaining
+its existing 180-second timeout and actual timed receipt. The supplied formal
+API call is exactly:
+
+```python
+runner.validate("P04-01")
+```
+
+The external Runner launcher/configuration is not present in the supplied task
+context; use Root's already registered invocation, without substituting an
+invented CLI, changing timeout, or treating direct checker timing as registered
+validation. Record actual SHA, elapsed time and exit status from that invocation.
+
+Then run direct real-candidate controls from actual clean submitted, merged and
+final checkouts, preserving the formal review/integration state machine:
+
+```sh
+python3 tools/check_p04_order_evidence.py --verify-only
+python3 "$P04_MERGED_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
+python3 "$P04_FINAL_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
+```
+
+After required formal validation/review and exact final-source binding, run the
+full178 product regression once, using a fresh output destination:
+
+```sh
+python3 "$P04_FINAL_CHECKOUT/tools/run_all_tests.py" \
+  --project-root "$P04_FINAL_CHECKOUT" --output "$B/p04-final-product-full-r21"
+```
+
+Do not regenerate raw collections, overwrite index/r20 evidence, alter existing
+case semantics, or run an additional native/full suite to compensate for a
+timeout. Any unrelated improvement is deferred. Pending Root execution is not
+a worker specification gap and does not change this submission's scope.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR22_STATIC_VALIDATION.json

@@ -0,0 +1,73 @@
+{
+  "scope": "AST/static source checks and in-memory compile ONLY; no module imports or execution of task code",
+  "python": [
+    {
+      "path": "tools/check_p04_order_evidence.py",
+      "bytes": 78399,
+      "sha256": "a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850",
+      "AST": "parsed",
+      "in_memory_compile": "compiled; not executed"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/p04_native_series.py",
+      "bytes": 72591,
+      "sha256": "667c95e10c451239292b08589706bfef978de730b321151ae7845dd10a06c411",
+      "AST": "parsed",
+      "in_memory_compile": "compiled; not executed"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_join_fixtures.py",
+      "bytes": 7888,
+      "sha256": "f89ee6b835a8b0dc47f804686f7e338e7178c24a5a30a8a25bcd8bf59dfbea0c",
+      "AST": "parsed",
+      "in_memory_compile": "compiled; not executed"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
+      "bytes": 6779,
+      "sha256": "f91b2d7003fd5c8cd196f849ad392d37479317e7d109eb584ccde5e5073e5bee",
+      "AST": "parsed",
+      "in_memory_compile": "compiled; not executed"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/collect_p04_native.py",
+      "bytes": 2996,
+      "sha256": "d727230de0af94dfc7e68bec40e84ecaa86a5b98d5e5bc16c2a35fe9c67fa12d",
+      "AST": "parsed",
+      "in_memory_compile": "compiled; not executed"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/build_p04_index.py",
+      "bytes": 9246,
+      "sha256": "47ae05b7bec617063e5d4fca2d8687f25e2eee0f809b5676ec91cf21c3223773",
+      "AST": "parsed",
+      "in_memory_compile": "compiled; not executed"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py",
+      "bytes": 18623,
+      "sha256": "03a0aaab7e824d1b516ee4c6b456913439515c03daa687b5822cdfefb4d54c46",
+      "AST": "parsed",
+      "in_memory_compile": "compiled; not executed"
+    }
+  ],
+  "gd_validation": "static text/declaration review only; engine parse NOT RUN",
+  "gd_sha256": "ceb592d853fd50063f20496c7b6df05257528dbe1c0d0d80bc6a8ccb1f9dd6d7",
+  "C_frozen": {
+    "exact_equal_to_immutable_full_stage": true,
+    "bytes": 20918,
+    "sha256": "5d778b3cfab7c139ca03812489508ce9aae90c1d17f8c2249c340f30d1496b3b",
+    "body_with_one_final_LF_sha256": "33ae2af6afb98b48919ed679ab8519b7da7ddfda68c00f71c557d5cc9aad4a6c"
+  },
+  "required_registry_unchanged": true,
+  "required_conditions": 15,
+  "EV": "additional existing obligation, unchanged",
+  "domains": 7,
+  "product_input_files": 1338,
+  "parse_gd_files": 316,
+  "native_runs": 0,
+  "fixture_runs": 0,
+  "tests": "NOT RUN",
+  "S4_raw": "pending Root execution",
+  "formal_acceptance": false
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR22_STATUS.md

@@ -0,0 +1,82 @@
+# Repair22 — source-ready submission; NOT RUN
+
+This batch changes only `tools/check_p04_order_evidence.py` and this P04-01
+documentation subtree. No Git command, test/fixture, engine, Runner operation,
+agent, manual commit or integration was performed. The normal autosubmit owns
+the submitted revision; the contract base SHA is not a new evidence version.
+
+S3 B1 no longer supplies `power_stop`. Its full diagnostic checks remain under
+`dependency_closure_diagnostic`, including the actual dependency reason,
+closure/release, departure history and recovery sale. It approves no priority.
+Strict power-vs-closure order remains D05 pending/unknown. The existing approvals
+cover dependency hold and the18:00 shift interval only; A01 is not reopened.
+
+S4 is a new minimal single-case QA probe using the existing ActorHardening,
+physical-kitchen and guarded Writer/Reader pattern. It cuts the actual sole
+cafeteria edge at959, waits for normal evaluation/projection at960, retains the
+held state at961, reconnects that same edge, and waits normally through the
+source-derived hold until970. Source constants were re-read as10/10. No forced
+evaluation, hold bypass, direct power/progress/patience/capacity writes or
+product edits are introduced. Kitchen Facility.OPEN / network ACTIVE, positive
+mana, operating dependency and open operator distinguish it from B1.
+
+Three formal Writer points and separate-process Reader restores retain every
+typed Runtime field and all four SaveService members. Reconnect resend at970
+must leave the full Runtime unchanged; normal971 and Reader replay add no
+extra sale/completion. Full intermediate phase raw is preserved. All graph
+nodes, cut/restored edge sets, revisions, allocation and derived dependency
+restoration are checked. Normal post-completion guest redecision/despawn is
+retained, not forced or concealed; no exit accompanies the outage/hold.
+
+R now derives shift PID and sale IDs from the existing full raw joins. S1 joins
+the existing pre-travel reservation/task/staff cell to the boarded task/trip,
+and checks actual mana0 and elevator loss of power. The existing join fixtures
+are retained and extended with the requested semantic negatives and consistent
+dynamic-ID positive controls. Existing C25 and all other fixture sources remain
+in place. No fixture result is claimed: S4 positives await actual Root raw.
+
+ORDER_AUDIT.md and order-audit.json are one current seven-domain table with
+normative rules, source, C/S1/S2a/S2b/S3 evidence, pending S4, approved authority
+and pending D05. REPAIR17–21 remain untouched historical documents and outputs;
+their current-status claims are superseded by repair22. The current protocol,
+collection plan and this status agree: no final acceptance.
+
+Static validation is recorded in REPAIR22_STATIC_VALIDATION.json:
+
+- Seven Python files parsed with AST and compiled in memory; none imported or
+  executed. GDScript received static text/source review only; engine parse NOT RUN.
+- The entire frozen C region is byte-identical to the preserved full-stage
+  checker. Its one-final-LF body hash is
+  `33ae2af6afb98b48919ed679ab8519b7da7ddfda68c00f71c557d5cc9aad4a6c`, matching
+  the supplied repair21 C_FULL_BLOCK_EXACT receipt. Existing C checks are intact.
+- The complete15-condition registry matches that immutable source; EV, seven
+  domains and three safety outcomes are unchanged. Product1338 inputs and the
+ 316-file `.gd` parse roster were counted from the actual relocation manifest.
+- The five supplied public power bodies were compared to their actual relocated
+  source. Full bodies, hashes, timing and restore analysis are retained in
+  REPAIR22_SOURCE_FACTS.json.
+
+The exact finite Root plan is `s4/S4_ROOT_RUN.md`: one fresh own-B four-phase
+collection, with explicit arguments and full input/QA/source footprints. All
+old C/S1/S2a/S2b/S3 raw and all R17 sources remain accessible and are not rerun.
+S4 remains **missing/pending Root execution**. Future native/index/cross-gate
+work does not block this source submission. The updated collector/index
+references use a fresh r22 destination; no r17/r20 evidence is overwritten.
+
+Preserve the21615-check proof. Static full-map comparison found exactly the
+unchanged product1338 plus the old checker in its1339 map. The new checker hash
+differs; never claim1339 byte identity. The178 product suites do not invoke the
+checker and `.py` is excluded from the316 parse roster, so reuse requires the
+explicit QA-only source/config/input/environment applicability argument in
+EVIDENCE_COLLECTION.md. New-checker validation and S4 are separate, pending.
+
+Root must rebind support53cb through its normal registered task once the new
+source is known, without metadata bypass. Only if an exact final1339 full proof
+is required, perform one run after all fixes, S4 raw, local checks, eight suites
+and rebind are bundled; do not splice versions or perform a blanket full now.
+
+No required source context is missing for this preparation. Remaining D05
+choices are explicitly pending and not silently implemented. Formal validation,
+independent review, exact final-source applicability and normal integration
+remain pending. CurrentAlphaScope,30 packages/88 deliveries, original13/88 and
+P04 main9b are unchanged. P04 receives no credit; nothing is integrated.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR23_STATUS.md

@@ -0,0 +1,34 @@
+# Repair 23 — submitted, NOT RUN
+
+S4 source preparation only. The wrapper now defaults to fresh import without
+accessing cache receipts or cache directories. It checks that private `.godot`
+is absent immediately before import and requires the complete 316-script parse
+roster. The complete 1338-file source check and sole QA override remain intact.
+Optional cache mode retains the original registered-path, passed-run, source
+identity, engine identity and original-cache preservation guards.
+
+Engine identity is independently pinned to
+`c7cccbf8fb143e34e02fd6521e09be2c2b974f0d5db080b19071c9c570718ccf`.
+Read-only SHA256 inspection found identical bytes in the installed executable
+and the preserved r22 staged executable; neither was launched.
+
+Current wrapper SHA256:
+`6d5f4e05e87607413bfb5498dc9c9e17c2bfd96bf751c9e645050ca6f8e69d5c`.
+The current runbook binds this SHA. The series verifier already binds the wrapper
+to current checkout bytes dynamically, so no series metadata change is needed.
+Historical REPAIR22_STATIC_VALIDATION.json is preserved as historical evidence,
+not rewritten to claim validation of the new wrapper.
+
+Root must use fresh staging `audit-support/p04-s4-source-r23` and fresh plan
+`p04-s4-plan-r23.json`. Output remains `p04-s4-native-r22`. Old staging and plan
+are preserved. All R22 fixes and other suite wrappers/checks are retained.
+
+Checker SHA256 remains
+`a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850`;
+S4 probe SHA256 remains
+`ceb592d853fd50063f20496c7b6df05257528dbe1c0d0d80bc6a8ccb1f9dd6d7`.
+No game input file was edited. Review was limited to source reading and hashes.
+No Git, tests, fixtures, check-only execution, engine, Runner, agents or manual
+commit were run. Native S4 evidence, root native/data/index work, independent
+review and formal acceptance remain pending. The expected validate MANIFEST
+failure is unchanged. Original P04-01 completion is not claimed.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR24_STATUS.md

@@ -0,0 +1,77 @@
+# Repair24 — source-ready submission
+
+Bounded continuation of P04-01 request-repair24; tests NOT RUN.
+Existing wrapper edits and the untracked identity fixture were read first and
+preserved/corrected. Only this execution subtree was written. No Git, engine,
+Runner, agent, commit or integration operation was performed.
+
+Changed source/runbook SHA256 (exact bytes):
+
+| File | SHA256 |
+| --- | --- |
+| s4/run_s4_native.py | dda495d33566eae14c8a707e77f8ec9dc6c7bd043076a091e90dd53f6a7490db |
+| p04_native_series.py | 348197759c169c2094db3b1114ca3abe5525b8d4bc9aca611d4579871a130b40 |
+| s4/engine_identity_negative_fixtures.py | f9148ef79cb62ec6631e7e3f23e1d3b062434f7152977aab3b9d18d82672255e |
+| s4/S4_ROOT_RUN.md | c1a00e3dad8d91d28df1a7f868f6e4e905f1df721baac964865e341c84356135 |
+
+This new status document records the hashes above; its own hash must be taken
+from the submitted checkout, outside its own contents.
+
+Wrapper pins changed: the own-B bare Godot copy is replaced with exactly
+`/Applications/Godot.app/Contents/MacOS/Godot`, rejecting symlinks and any
+different resolved path. Its constant SHA remains
+`c7cccbf8fb143e34e02fd6521e09be2c2b974f0d5db080b19071c9c570718ccf`.
+Engine identity no longer depends on an old cache runner-input. Fresh NO-CACHE
+is the default at plan and native collection. Optional explicit cache mode
+rejects failed receipts before reading their inputs or cache contents.
+No default cache or cache PASS is required. No engine is copied, re-signed or
+modified, and no codesign/xattr/security operation is added.
+
+Before-launch, during-collection and explicit after-cleanup re-pins retain the
+full runtime descriptor (path/resolved path, bytes, SHA, device, inode, mode,
+mtime and ctime). Runner-input and execution retain equal before/during/after
+identity records and execution retains labeled observations. fixed_guard still
+re-pins the engine. The verifier permits only this exact installed engine
+outside B, reads/hashes it exactly and checks the recorded identities.
+Fixed inputs and QA remain own-B only; actual command[0] must equal the pin.
+
+Defaults and Root staging are now:
+`p04-s4-native-r24`, `p04-s4-plan-r24.json`,
+`audit-support/p04-s4-source-r24`. Only RUNS S4 changes to r24.
+C/S1-S3 bindings, other series and the frozen C block (20916) are unchanged.
+Source1338, parse316, sole QA override, default-player protection, owned
+four-distinct-PID capture, live-engine refusal, disk admission, fresh output,
+cleanup-before-fixed-guard, formal Writer/Reader, NO_POWER, typed declarations,
+forbidden mutations/bypasses and mana constants guards remain.
+
+Untouched checker: SHA256
+`a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850`,
+78399 B. Untouched probe: SHA256
+`ceb592d853fd50063f20496c7b6df05257528dbe1c0d0d80bc6a8ccb1f9dd6d7`.
+All 1338 game files are unchanged; no game source was written. No new claim of
+executed 1338-file verification is made.
+
+The formal reviewer's five findings are carried forward unchanged, with no
+closure claimed. Their individual review text was not supplied in this dispatch
+or found in the local execution records searched; it is not reconstructed here.
+Main 9b remains frozen at original 13/88. Support 53cb remains review pending.
+D05 remains pending. No acceptance denominator, specification, main integration
+or original completion state changes.
+
+r22 is an immutable failed proof and remains ineligible. Diagnostics:
+`audit-support/p04-root-d393-s4-r01/ENGINE_STAGING_DIAGNOSTICS.json`.
+Its pre-banner staged-copy failure is an environment/staging fault; no product
+logic or probe/checker repair is claimed. Root uses the installed executable
+directly and preserves r22. Do not rerun S1-S3, C or full178.
+
+Validation: static AST parsing and in-memory compile completed for the wrapper,
+series verifier and identity fixture; no module was imported or executed.
+Read-only SHA/byte inspection completed for the four listed files, checker and
+probe. These are source checks only. Tests NOT RUN: identity fixtures, all other
+fixtures/suites, check-only plan generation, native S4, full178, registered
+validation and independent review. No unexecuted result is reported as passed.
+
+Registered validation stays exit 2 until Root generates the current
+MANIFEST.json collection; the gate is not changed. This is the carried-forward
+expected gate state, not a newly executed validation result. Root execution,
+current exact-version evidence and formal independent review remain pending.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR30_STATIC_CHECKS.json

@@ -0,0 +1,71 @@
+{
+  "task_id": "P04-01",
+  "scope": "Worker static controls only; no engine/registered validation/acceptance",
+  "formal_acceptance": false,
+  "original_credit": 0,
+  "results": [
+    {
+      "check": "checker_approval_fixtures",
+      "status": "pass",
+      "positive": 6,
+      "negative": 24,
+      "scope": "path/hash/status + literal human answers"
+    },
+    {
+      "check": "checker_negative_fixtures",
+      "status": "pass"
+    },
+    {
+      "check": "checker_applicability_fixtures",
+      "status": "pass",
+      "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
+      "changed_function_units": 58
+    },
+    {
+      "check": "checker_native_fixtures",
+      "status": "pass",
+      "scope": "mutations of historical supplied raw; not a native engine run"
+    },
+    {
+      "check": "checker_series_fixtures",
+      "status": "pass",
+      "scope": "historical/synthetic controls"
+    },
+    {
+      "check": "checker_encoder_fixtures",
+      "status": "pass"
+    },
+    {
+      "check": "checker_join_fixtures",
+      "status": "pass",
+      "scope": "historical/synthetic controls"
+    },
+    {
+      "check": "bulk_reader_equivalence",
+      "status": "not_run",
+      "reason": "Contains git init/hash-object -w and isolated-object writes; worker Git writes prohibited"
+    },
+    {
+      "check": "checker_role_fixtures",
+      "status": "not_run",
+      "reason": "Contains clone/checkout/add/commit/merge/reset; worker Git writes prohibited; fresh Q index is also not available"
+    },
+    {
+      "check": "Python AST / top-level execution JSON",
+      "status": "pass"
+    },
+    {
+      "check": "git diff --check",
+      "status": "pass"
+    }
+  ],
+  "exclusions": [
+    "No fresh-Q positive fixture claimed",
+    "No fake-normal-C qualification claimed",
+    "No S5 native execution",
+    "No full184/329",
+    "No p04-acceptance on current S"
+  ],
+  "note": "Recorded fixture outcomes are not exact-version native proofs. Final comment/document edits do not alter executed fixture semantics. Final source is unqualified for native admission; see REPAIR30_STATUS.md."
+}
+

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR30_STATUS.md

@@ -0,0 +1,67 @@
+# Repair 30 — BLOCKED / partial implementation
+
+This revision is **not ready for Root native admission**. Formal status remains
+**16/88, P04=0**. Outstanding items include unfinished implementation, not merely
+the fresh evidence Root is expected to produce after submission.
+
+Implemented within allowed_paths:
+
+- Four actual human approvals, exact answer/policy text, both source paths and
+  SHA256 bindings; candidate documents marked superseded.
+- Per-ID path/hash authority binding for six D05 IDs; required authority refs
+  corrected without changing the 15-condition + EV roster or thresholds.
+- Frozen M is c0ea009b28a7649aca6a433a1a24dc0be5e7ab81. Counts/membership derive
+  from Git objects: 1368 product files excluding checker, 3644 metadata paths.
+  Ordering functions retain registered byte equality; applicability has 58
+  changed function units. Full details are in REPAIR30_SOURCE_FACTS.json.
+- Q must equal the recomputed merge-tree object. A commit cannot impersonate Q.
+  C must have frozen M as first parent, legal S as second parent and the same
+  entire tree as Q. Selected native sources explicitly include the checker;
+  product equality continues to exclude it.
+- Seven-domain audit refreshed with actual M hashes/function lines. All
+  condition-specific nativeWindows obligations remain pending.
+
+Implementation/context gaps blocking readiness:
+
+1. S5's four executable drivers and raw semantic adapters are **not written**.
+   s5/PENDING.md records concrete source constraints. Additional approved
+   destruction/day/pause-reason/exit measurements are not enforced from S5 raw
+   bytes yet. REQUIRED retains the existing safety metrics.
+2. p04_native_series.py, collect_p04_native.py, S1–S4 wrappers and parts of the
+   schema2 builder still bind historical run names/manifests/raw pins. Connect
+   fresh Q material without replacing historical records or inventing future
+   hashes. The builder now reads tested revision from native provenance and
+   includes the checker, so the old bundle cannot satisfy the new role check.
+3. Full184/329 runner-input has no source_before or QA_overrides, unlike native
+   QA inputs. It needs its own exact source/settings/markers/policy/engine/input
+   and ended-receipt join. The native input loop is not a full-proof verifier.
+4. Parent/tree equality alone cannot establish normal prepare-integration
+   provenance: a synthetic commit can have identical parents/tree. The supplied
+   plan does not define the concrete normal-candidate qualification receipt,
+   path and hash contract. Independent qualification remains pending; no
+   invented Runner API or authority has been added.
+5. Bulk and role fixtures perform Git writes, including temporary objects,
+   commits and merges. They were not run under the worker Git-write prohibition.
+   Updated role negatives are unexecuted; genuine fresh-Q positive and
+   fake-normal-C rejection remain unqualified.
+
+Static results are in REPAIR30_STATIC_CHECKS.json. Historical/synthetic fixture
+success is not new game evidence. No engine, formal registered gate, Runner
+operation, Git write or other agent was invoked. Product/test-tree/Clock/values
+remain unchanged.
+
+Required Root order after remaining implementation is repaired:
+
+1. All eight static controls plus role/applicability/approval negatives.
+2. Genuine Q from final S and frozen M; fresh real native S1–S5 once.
+3. Inspect free disk and verified CoW, then full184/329 once on the same final Q
+   including final checker; bind test_required_kitchen separately.
+4. Truthful index from exact raw material.
+5. Registered p04-acceptance on S with --verify-only.
+6. Independent whole-unit review.
+7. Normal prepare-integration/final on independently qualified C, equal to Q for
+   source/settings/markers/policy/engine/inputs.
+
+Keep live Root records under .runtime while M is frozen. Old S1–S4/r22 and f5
+full178 remain historical. No known-fail formal gate is a progress check.
+No sources/evidence are removed for the obsolete 500000-byte cap.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR31_STATIC_CHECKS.json

@@ -0,0 +1,94 @@
+{
+  "task_id": "P04-01",
+  "scope": "Worker static controls only; no native run or formal gate",
+  "formal_acceptance": false,
+  "original_credit": 0,
+  "results": [
+    {
+      "check": "checker_approval_fixtures",
+      "status": "pass",
+      "exit_code": 0,
+      "scope": "six positive and 24 negative authority controls"
+    },
+    {
+      "check": "checker_negative_fixtures",
+      "status": "pass",
+      "exit_code": 0,
+      "scope": "historical/synthetic control only; no fresh Q proof"
+    },
+    {
+      "check": "checker_applicability_fixtures",
+      "status": "pass",
+      "exit_code": 0,
+      "scope": "historical/synthetic control only; no fresh Q proof"
+    },
+    {
+      "check": "checker_native_fixtures",
+      "status": "pass",
+      "exit_code": 0,
+      "scope": "historical/synthetic control only; no fresh Q proof"
+    },
+    {
+      "check": "checker_series_fixtures",
+      "status": "pass",
+      "exit_code": 0,
+      "scope": "historical/synthetic control only; no fresh Q proof"
+    },
+    {
+      "check": "checker_encoder_fixtures",
+      "status": "pass",
+      "exit_code": 0,
+      "scope": "historical/synthetic control only; no fresh Q proof"
+    },
+    {
+      "check": "checker_join_fixtures",
+      "status": "pass",
+      "exit_code": 0,
+      "scope": "historical/synthetic control only; no fresh Q proof"
+    },
+    {
+      "check": "Python AST / execution JSON",
+      "status": "pass",
+      "python_files": 22,
+      "json_files": 17
+    },
+    {
+      "check": "git diff --check",
+      "status": "pass"
+    },
+    {
+      "check": "normal C fail-closed in-memory controls",
+      "status": "pass",
+      "cases": [
+        "missing authority contract rejected",
+        "caller-forged authority contract rejected"
+      ],
+      "scope": "not a Git role fixture"
+    },
+    {
+      "check": "bulk_reader_equivalence",
+      "status": "blocked",
+      "exit_code": 1,
+      "reason": "/tmp directory creation raised PermissionError (Operation not permitted), before any Git invocation",
+      "execution": "fixture body unexecuted; Root-run"
+    },
+    {
+      "check": "checker_role_fixtures",
+      "status": "unexecuted",
+      "reason": "isolated temporary directory unavailable; fresh-Q evidence also unavailable; Root-run"
+    },
+    {
+      "check": "checker_candidate_fixtures",
+      "status": "unexecuted",
+      "reason": "isolated temporary directory unavailable; Root-run"
+    }
+  ],
+  "exclusions": [
+    "S5 drivers and adapters not implemented",
+    "fresh-Q pipeline not implemented",
+    "full184/329 verifier not implemented",
+    "normal-C authoritative receipt path/hash/provenance contract not supplied",
+    "no genuine-Q or qualified-C positive claimed"
+  ],
+  "note": "Existing REPAIR30_SOURCE_FACTS and REPAIR30_STATIC_CHECKS were reused without modification. Counts here describe static file parsing, not acceptance or runtime source membership."
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR31_STATUS.md

@@ -0,0 +1,59 @@
+# Repair 31 — BLOCKED / incomplete implementation
+
+Formal status remains **16/88, P04 credit 0**. **Do not admit the once-only
+native/full batch.** This revision does not finish BF35.
+
+D05 is **six of six actually approved**. There is no policy question for the
+human. Adoption into enforced raw evidence and exact-Q verification are pending.
+A01 remains approved. The per-ID path/SHA256 bindings in the checker and the
+superseded candidate documents are preserved. The authority fixtures exercise
+positive, missing, wrong-hash, pending-status and wrong-path cases for every ID.
+
+Repair30's SOURCE_FACTS and STATIC_CHECKS remain historical, unchanged inputs.
+This repair adds a fail-closed normal-C qualification boundary and records the
+receipt content requirements in `NORMAL_C_RECEIPT_FIELDS`. Even a commit with
+the correct two parents and Q tree is insufficient. The authoritative Root/Runner
+receipt path, digest and provenance verification contract have not been supplied;
+`NORMAL_C_RECEIPT_CONTRACT` remains unset. No Runner API or authority is inferred.
+An index-provided receipt cannot resolve this gap. This blocks every C, including
+a legitimate C, until that concrete contract and its verifier are supplied.
+
+The schema2 builder's undefined `tested` reference is fixed by checking the CLI
+reference against the constructed payload's tested version. This does not make
+its historical pipeline usable for fresh Q.
+
+Bulk and role fixtures now allocate under `/tmp`, outside the source repository,
+with inherited Git routing removed. Role fixtures reject unqualified no-ff merges
+and synthetic commits with identical parents/tree. The additional candidate
+fixture constructs such a commit only in a temporary bare clone. These Git
+fixtures are **Root-run / unexecuted**: the worker's bulk attempt failed on
+temporary directory creation with `PermissionError: Operation not permitted`,
+before any Git invocation. They were not redirected into the worktree.
+
+Remaining implementation, separate from the genuine authority context gap:
+
+1. Four executable S5 drivers and their raw semantic adapters are still missing.
+   `s5/PENDING.md` remains accurate. All approved destruction/day/reason/exit
+   policies must be enforced alongside the existing safety conditions.
+2. Fresh-Q run identity/provenance plumbing in native series, collector, S1–S4
+   wrappers and schema2 builder is unfinished. Historical names, pins and source
+   manifests have not been relabeled.
+3. The separate full184/329 verifier and its exact source/settings/markers/policy/
+   engine/input/ended-receipt joins, including separate test_required_kitchen
+   binding, are unfinished. The native input loop is not a substitute.
+4. Normal-C positive qualification needs the actual authoritative receipt contract
+   described above; matching Git structure alone is deliberately rejected.
+5. Genuine-Q positive and fake-Q/full-role fixtures remain unexecuted. The new
+   synthetic-C Git fixture also remains unexecuted; static parsing is not proof
+   that it ran.
+
+See REPAIR31_STATIC_CHECKS.json for actual worker results. No engine, formal gate,
+Runner operation, repository Git write, integration or other agent was invoked.
+Product code, Clock, values, tests, spec, denominator, thresholds and permissions
+are unchanged. No material was removed for the obsolete byte cap.
+
+After the missing implementation and context are resolved, Root retains the
+recorded order: static controls; genuine Q and fresh S1–S5 once; disk/verified CoW
+then full184/329 once on final Q with final checker; truthful index; verify-only
+on S; independent whole-unit review; prepare-integration/final on qualified C.
+Live records stay under `.runtime`. No known-failing gate is a progress check.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR32_STATIC_CHECKS.json

@@ -0,0 +1,63 @@
+{
+  "task_id": "P04-01",
+  "scope": "new concrete32 static preparation only",
+  "results": [
+    {
+      "path": "normal_c_join.py",
+      "check": "AST and in-memory compile",
+      "exit_code": 0,
+      "status": "pass",
+      "sha256": "3156e1df928ae15ab311b61eb27e21ef27cf123cb7097646a81a3f836c30ba33"
+    },
+    {
+      "path": "normal_c_join_fixtures.py",
+      "check": "AST and in-memory compile",
+      "exit_code": 0,
+      "status": "pass",
+      "sha256": "fba1634aafbb5c6030bec073b75b609a20d10d5ca6a6f0eddc270a12023830a3"
+    },
+    {
+      "path": "scratch_fixture_adapter.py",
+      "check": "AST and in-memory compile",
+      "exit_code": 0,
+      "status": "pass",
+      "sha256": "4994101754c38568007f2d7e1e0c8a2221d26216f464c496a7258ff89c601994"
+    },
+    {
+      "path": "s5/run_s5_native.py",
+      "check": "AST and in-memory compile",
+      "exit_code": 0,
+      "status": "pass",
+      "sha256": "928409e17984330498b2637e33957740bcdd91d427df5ee60d21a86671646fa2"
+    },
+    {
+      "path": "s5/s5_power_adapter.py",
+      "check": "AST and in-memory compile",
+      "exit_code": 0,
+      "status": "pass",
+      "sha256": "6b77e1ac7f1bdfd031321f106d8a6fcf465a3c1dd30e697d2b1e7c7285139f15"
+    },
+    {
+      "path": "s5/p04_s5_power_probe.gd",
+      "check": "text-only forbidden operation and declaration controls",
+      "exit_code": 0,
+      "status": "pass",
+      "godot_parse": "unexecuted",
+      "sha256": "248da3f1dbca644e2fd62fcf283a4e499e0631ff23f8dc44dc77b872ef1be5ba"
+    },
+    {
+      "check": "normal-gate reference supplied index SHA256",
+      "status": "pass",
+      "exit_code": 0,
+      "sha256": "4c6067bbd57034764873a468ff161a6882d232503043d5640fc83dea0b455856"
+    }
+  ],
+  "fixtures": "unexecuted",
+  "formal_validation": "unexecuted",
+  "engines_launched": 0,
+  "git_commands": 0,
+  "runner_operations": 0,
+  "whole_goal_accepted": false,
+  "original_credit": 0,
+  "existing_partial31_files_edited": 0
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR32_STATUS.md

@@ -0,0 +1,44 @@
+# Repair 32 — partial implementation submitted; no acceptance claim
+
+Only new concrete32 files were added. Existing partial31 files, including the
+checker and s5/PENDING.md, were not edited. No condition credit is claimed:
+formal 16/88, original 30/88, P04 credit 0, all 15 conditions plus EV, frozen
+Mc0 and all six approved D05 items remain unchanged.
+
+Implemented, unexecuted:
+- S5 power driver pair and S4-derived wrapper: public bath pure depletion and
+  cafeteria/kitchen reason-priority depletion; public spend/recovery commands;
+  observed completion; same-key replay; full typed/JSON phase points; formal
+  save/independent Reader load/replay. No disconnect or direct resource mutation.
+- Hashed raw semantic adapter for existing power_stop, dependency_stop and
+  recovery_completion measurement keys. It does not qualify native provenance.
+- Read-only normal_c_join over actual Runner task/candidate/main_base, approval,
+  validation/review and integration/final records. No future C hash is frozen.
+  Root must retain an actual approved Runner snapshot before integrate deletes
+  approval; later final records come from the current Runner database.
+- Root-run synthetic normal join controls and explicit-scratch adapter for
+  preserved Git fixtures. No fixtures were executed.
+- S5_ROOT_RUN.md and NORMAL_C_BOUNDARY32.md explain boundaries and limitations.
+
+Actual verification: Python AST/compile for five new Python files and textual
+probe controls passed. No pycache, engine, Godot parse, Git command, Runner
+operation, fixture, formal validation, independent review or integration ran.
+The shell rejected a here-document temporary-file allocation; subsequent commands
+used python -c. An attempted documentation addition at the repository root was
+rejected and no file was created there; the document was added within allowed_paths.
+
+Remaining implementation limitations:
+1. The old checker still deliberately rejects normal C: preserving partial31
+   means this standalone Runner-record join is not connected to its role output.
+   It does not assert Git structure/Q equivalence and cannot bypass that gate.
+2. The S5 wrapper retains historical S4 template identity/count bindings. Fresh-Q
+   plumbing is outside this step and remains pending; this is not batch admission.
+3. S5 destruction/midnight/exit, fresh-Q/full184/329, truthful collection/index,
+   exact-version applicability, independent review and ordinary gates remain
+   pending. None was attempted together or counted as a new unit.
+4. Scratch adapters preserve the old fixtures' assertions; positive normal-C
+   structure fixtures under the eventual integrated boundary are still pending.
+
+Runner/Root must run the permitted static fixtures in external scratch, review
+the added source, and resolve boundary integration before the established
+once-only genuine-Q/native/full sequence. No evidence or completion is invented.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR33_STATIC_CHECKS.json

@@ -0,0 +1,112 @@
+{
+  "task_id": "P04-01",
+  "status": "blocked",
+  "checks": [
+    {
+      "kind": "py_compile",
+      "path": "tools/check_p04_order_evidence.py",
+      "output": "compiled without syntax errors",
+      "exit_code": 0
+    },
+    {
+      "kind": "py_compile",
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
+      "output": "compiled without syntax errors",
+      "exit_code": 0
+    },
+    {
+      "kind": "py_compile",
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_role_fixtures.py",
+      "output": "compiled without syntax errors",
+      "exit_code": 0
+    },
+    {
+      "kind": "py_compile",
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/normal_c_join.py",
+      "output": "compiled without syntax errors",
+      "exit_code": 0
+    },
+    {
+      "kind": "py_compile",
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/normal_c_join_fixtures.py",
+      "output": "compiled without syntax errors",
+      "exit_code": 0
+    },
+    {
+      "kind": "py_compile",
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
+      "output": "compiled without syntax errors",
+      "exit_code": 0
+    },
+    {
+      "kind": "pure_static_ast",
+      "observation": "normal_c_join.verify parameters",
+      "output": [
+        "database",
+        "approved_database",
+        "candidate",
+        "submission",
+        "hashes"
+      ]
+    },
+    {
+      "kind": "pure_static_source",
+      "observation": "checker contains runner_inputs",
+      "output": true
+    }
+  ],
+  "fixtures": [
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_applicability_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_approval_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_encoder_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_join_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_native_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_role_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/normal_c_join_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/engine_identity_negative_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/receipt_lifecycle_fixtures.py",
+      "execution": "unexecuted; Root only"
+    }
+  ],
+  "engine_runs": 0,
+  "fixture_runs": 0,
+  "condition_credit": 0,
+  "original_completion": false
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR33_STATUS.md

@@ -0,0 +1,51 @@
+# REPAIR33 — blocked, no implementation or acceptance claim
+
+P04-01 remains incomplete. Only this status and REPAIR33_STATIC_CHECKS.json
+were added. Checker, fixtures, wrapper and S5 run documents remain unchanged.
+No Git writes, Runner operations, fixture execution or engine runs occurred.
+
+The instruction to return blocked for missing specifications applies to these
+unresolved input contracts:
+
+- The Root-supplied Q descriptor has no supplied schema or existing definition
+  in the inspected checker, S5 wrapper or local execution documentation.
+  `verify_roles` requires `product_binding` to contain exactly `tested_product`
+  and `runner_inputs`. Each runner input references an existing native receipt,
+  wrapper and materials; it does not define M/S fields or the wrapper's fresh-Q
+  configuration input. Specify the descriptor fields/types and how M, S, Q,
+  staged product, settings, markers, policy and material bindings are obtained
+  without inventing another input contract. Future hashes are not requested.
+- The requested combined control includes matching Runner/Root records, but
+  `normal_c_join.verify(database, approved_database, candidate, submission,
+  hashes)` accepts only Runner databases and caller-supplied commit strings.
+  Its CLI has no Root exact-candidate record input or verification. Specify
+  that record's schema and binding, or explicitly confirm that Root performs
+  this join outside this verifier and define the combined control boundary.
+  The verifier was neither weakened nor called from the checker.
+
+These are contract questions, not requests for permission expansion. Runner
+core, Owner CLI and the reference core were not read. No dependency on them
+was introduced. No speculative partial implementation was made.
+
+Actual verification: six existing Python files compiled with py_compile;
+generated bytecode was placed under the allowed execution directory and
+removed. Pure AST inspection confirmed the normal_c_join parameter list;
+a source assertion confirmed runner_inputs is present. Actual outputs are
+recorded in REPAIR33_STATIC_CHECKS.json. All twelve discovered fixture files
+are individually listed there as unexecuted; Root runs them later with its
+own scratch directory. No test or acceptance result is inferred from syntax.
+
+An initial shell here-document command failed before Python started with
+`can't create temp file for here document: operation not permitted`.
+It produced no verification result. The checks were then run using python3
+`-c`, without shell temporary-file redirection.
+
+Explicitly pending: this REPAIR33 implementation; S5 destruction, midnight
+and exit drivers; fresh-Q plumbing for S1–S4 and the collector; all 184
+executable suites and the 329 parse verifier; the truthful index; Root's
+fixed run order, independent review and normal integration/final joins.
+
+Formal 16/88, original 30/88, seven domains plus EV, all six D05 approvals
+and P04 credit 0 remain fixed. M remains
+`c0ea009b28a7649aca6a433a1a24dc0be5e7ab81`. No condition credit, original
+completion, self-reported acceptance or cap change is claimed.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR34_STATIC_CHECKS.json

@@ -0,0 +1,95 @@
+{
+  "task_id": "P04-01",
+  "status": "submitted",
+  "checks": [
+    {
+      "kind": "py_compile",
+      "path": "tools/check_p04_order_evidence.py",
+      "output": "tools/check_p04_order_evidence.py: py_compile completed without syntax errors",
+      "exit_code": 0
+    },
+    {
+      "kind": "py_compile",
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
+      "output": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py: py_compile completed without syntax errors",
+      "exit_code": 0
+    },
+    {
+      "kind": "py_compile",
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_role_fixtures.py",
+      "output": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_role_fixtures.py: py_compile completed without syntax errors",
+      "exit_code": 0
+    },
+    {
+      "kind": "ast",
+      "output": "AST: documentation roster is definition-only; qualifier retains identity require and structural return with provenance false; role candidate initialized, assigned and returned; pure control function has no subprocess/Git calls.",
+      "exit_code": 0
+    },
+    {
+      "kind": "py_compile",
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
+      "output": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py: py_compile completed without syntax errors (final literal inputs)",
+      "exit_code": 0
+    },
+    {
+      "kind": "ast",
+      "output": "AST: pure candidate controls contain four literal 40-hex inputs.",
+      "exit_code": 0
+    }
+  ],
+  "fixtures": [
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_applicability_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_approval_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_encoder_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_join_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_native_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_role_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/normal_c_join_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/engine_identity_negative_fixtures.py",
+      "execution": "unexecuted; Root only"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/receipt_lifecycle_fixtures.py",
+      "execution": "unexecuted; Root only"
+    }
+  ],
+  "pure_candidate_controls": "unexecuted; Root may use checker_candidate_fixtures.py --pure-only",
+  "engine_runs": 0,
+  "fixture_runs": 0,
+  "condition_credit": 0,
+  "original_completion": false
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR34_STATUS.md

@@ -0,0 +1,49 @@
+# REPAIR34 — structural step submitted
+
+P04-01 remains incomplete. This step changes only the checker structural C
+qualification and the two local fixture boundaries, plus this status and the
+static-check record. The checker returns structure_qualified true and
+provenance_verified_by_checker false with C/S/M/C_tree/Q joins. Prospective
+roles return candidate_structure null. The provenance roster is documentation
+only, never consumed. Other parent, tree, checker-blob and binding guards
+were left unchanged.
+
+Candidate fixtures now expect honest structural qualification for a manufactured
+same-tree C. A separate --pure-only path contains three identity negatives and
+one exact positive with literal 40-hex inputs; it requires no Git or engine.
+The two role cases expect structural verification and separately record actual
+downstream --verify-only returncode/stdout/stderr without asserting acceptance.
+Both boundaries assert stderr has no 'qualification context gap'. Other
+negative expectations remain unchanged. These fixtures have not been executed;
+their downstream outcomes are pending Root execution, not inferred here.
+
+Actual verification is limited to py_compile for the three changed Python
+files and AST checks recorded with their real output in
+REPAIR34_STATIC_CHECKS.json. Temporary compilation bytecode was created only
+inside the allowed execution directory and removed. Every discovered fixture,
+including the pure candidate controls, is unexecuted. An initial editing
+command failed with a Python SyntaxError before any file writes; edits were
+then applied in place. That command was not a validation check.
+
+Explicitly pending in this same unit:
+
+- normal_c_join and its fixtures: unchanged and unexecuted here; post-final
+  Root SQL candidate/M/S/approval/validation/review/integration/final joins
+  remain mandatory before original credit.
+- Wrapper/descriptor: separate pre-run configuration with Root-derived M/S/Q
+  and pinned source/material references, not after-run binding.runner_inputs
+  receipts. Root JSON and exact-candidate qualification remain pending.
+- S5 destruction, midnight and exit drivers; S1–S4 and collector fresh Q.
+- All 184 executable suites / 329 parse verification; truthful index.
+- Root run order, independent review, integration/final and provenance joins.
+
+scratch_fixture_adapter.py routing is unchanged. No Git commands or writes,
+engine runs, fixture runs, Runner operations, permissions or cap changes were
+performed. Runner core and Owner CLI were not read; this step does not depend
+on them. External provenance remains a required pending context, not a reason
+to block the authorized structural step.
+
+All seven domains plus EV, all six D05 approvals, formal 16/88, original 30/88
+and P04 credit 0 remain fixed. Frozen M is
+c0ea009b28a7649aca6a433a1a24dc0be5e7ab81. No condition credit, self-reported
+acceptance, original completion or new counted unit is claimed.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR35_STATIC_CHECKS.json

@@ -0,0 +1,72 @@
+{
+  "validation": "py_compile and ast only",
+  "results": [
+    {
+      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
+      "py_compile": "passed",
+      "ast.parse": "passed",
+      "ast.required_functions": "passed",
+      "ast.no_fixed_counts": "passed"
+    },
+    {
+      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_wrapper_fixtures.py",
+      "py_compile": "passed",
+      "ast.parse": "passed"
+    }
+  ],
+  "fixtures": [
+    {
+      "name": "partial-triple",
+      "status": "unexecuted"
+    },
+    {
+      "name": "non-hex",
+      "status": "unexecuted"
+    },
+    {
+      "name": "short",
+      "status": "unexecuted"
+    },
+    {
+      "name": "mixed-modes",
+      "status": "unexecuted"
+    },
+    {
+      "name": "historical-native",
+      "status": "unexecuted"
+    },
+    {
+      "name": "no-flags",
+      "status": "unexecuted"
+    },
+    {
+      "name": "fresh-q",
+      "status": "unexecuted"
+    },
+    {
+      "name": "historical-check-only",
+      "status": "unexecuted"
+    },
+    {
+      "name": "git-dirty-file",
+      "status": "unexecuted"
+    },
+    {
+      "name": "git-untracked-file",
+      "status": "unexecuted"
+    },
+    {
+      "name": "git-wrong-head-tree",
+      "status": "unexecuted"
+    },
+    {
+      "name": "git-wrong-submission",
+      "status": "unexecuted"
+    },
+    {
+      "name": "git-wrong-main",
+      "status": "unexecuted"
+    }
+  ],
+  "accepted": false
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR35_STATUS.md

@@ -0,0 +1,37 @@
+# REPAIR35 — submitted preparation, no acceptance credit
+
+Scope is the S5 wrapper fresh-Q mode, pure mode-selection fixtures and status
+documents only. The wrapper now binds M/S/Q_tree, the clean checkout carrier,
+selection authority, selected source bytes and Q marker contracts. Fixed-input
+rechecks require identical provenance. Cache comparisons remove only checker
+and TEST from both maps and otherwise compare keys and hashes. R17 is explicitly
+check-only/read-only. Fresh-Q counts are derived; historical material is listed
+as historical_not_inputs rather than pinned as fresh-Q input.
+
+R34 structural C, Root normal_c_join, probe, adapter, ownership/PID/cleanup,
+Writer/Reader, formal mirror and inventory remain unchanged. Product, Clock,
+values, tests/, Runner, core and Owner CLI were read-only. No Git commands,
+engines, Runner operations or fixture execution were performed. No /tmp or
+permission additions were used. A shell heredoc could not be created by the
+environment; that edit attempt exited before running Python or changing files.
+Edits were then applied directly in place.
+
+Only py_compile and AST static validation are recorded in
+REPAIR35_STATIC_CHECKS.json. Pure fixtures (partial triple, non-hex, short,
+mixed modes, historical native, no flags, full triple, historical check-only)
+and all five Root Git negatives are **unexecuted**. No functional pass is claimed.
+
+Pending: S5 destruction/midnight/exit drivers; fresh Q for S1–S4 and collector;
+184 suites / 329 parse; truthful index; Root run order; Root exact-candidate
+qualification. Root next builds Qt and parentless X, stages under its own B,
+then runs check-only, pure fixtures and Git negatives as described in
+s5/S5_ROOT_RUN.md. No native/batch admission until the pending prerequisites
+are ready.
+
+All 7 domains + EV, formal 16/88, original 30/88, P04 credit 0, all six D05
+approvals, frozen M c0ea009b28a7649aca6a433a1a24dc0be5e7ab81 and allowed_paths
+remain fixed. This is an internal step of P04-01, no new counted unit and no
+completion claim. Unchanged support gates including owned_outer.py were not
+read or executed; their qualification remains with Root, as recorded in the
+direction. Source commit identity was not independently checked because Git
+commands are prohibited for this worker.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR36_STATIC_CHECKS.json

@@ -0,0 +1,41 @@
+{
+  "py_compile_ast": [
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
+      "sha256": "e96b2793d7352ac52e16505c9c4cde3d151497763be3cb47926338df070b05e5",
+      "py_compile": "passed",
+      "ast": "passed",
+      "top_level_functions": [
+        "r17_relocation_guard",
+        "probe_guard",
+        "module",
+        "pin",
+        "load_uid_helper",
+        "make_uid_policy",
+        "engine_pin",
+        "select_mode",
+        "fresh_q_guard",
+        "main"
+      ]
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_uid_controls.py",
+      "sha256": "17069b87b98c385e1298152c9c5c2f23c8710b79eb19aef073c64ce215f6c902",
+      "py_compile": "passed",
+      "ast": "passed",
+      "top_level_functions": [
+        "module",
+        "main"
+      ]
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_wrapper_fixtures.py",
+      "sha256": "1a4daebf46051e975a9cc740660c4672371ea6a9e6cb04cbc1d458ece5f0151d",
+      "py_compile": "passed",
+      "ast": "passed",
+      "top_level_functions": [
+        "main"
+      ]
+    }
+  ]
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR36_STATUS.md

@@ -0,0 +1,28 @@
+# REPAIR36 — bounded preparation submitted, no acceptance credit
+
+Changes are limited to the S5 wrapper, new pure UID controls and these documents.
+Actual-Q AST helper loading, finite derived UID planning, import sealing,
+private-globals phase instrumentation, phase receipts and cleanup rechecks
+supplement the existing expected inventory. Historical selection, existing
+require gates, ownership/PID, engine, cache and formal mirror rules remain.
+The helper is loaded from real Q before controls construct synthetic refs.
+
+Only py_compile and AST checks are executed and recorded in
+REPAIR36_STATIC_CHECKS.json. Wrapper fixtures, UID controls, check-only plans,
+Git negatives and every native diagnostic are unexecuted. No functional pass,
+full regression, 15+EV batch, original credit or completion is claimed.
+No Git, engine, Runner or other agent operations were performed. A shell
+heredoc edit failed before Python execution; edits then used apply_patch.
+
+Context gap: Q runner API was read from
+build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_all_tests.py.reference;
+Root must confirm the actual Q runner matches that mirror (320ca668…)
+at runtime. Helper implementation was read from the adjacent P13 reference;
+runtime loading uses only the actual pinned Q, never either mirror.
+
+Pending: S5 destruction/midnight/exit drivers; S1–S4/collector fresh Q;
+derived 184 suites / 329 parse; truthful index; Root exact-candidate qualification.
+Root order is py_compile → wrapper fixtures → UID controls with explicit scratch
+→ fresh check-only plan → exactly one new-name diagnostic. The failed r35
+diagnostic is preserved. All 7 domains + EV, formal 16/88, original 30/88,
+P04 credit 0, all six D05 approved in the actual human record; adoption verification pending, M c0ea009 and allowed_paths stay fixed.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR37_STATIC_CHECKS.json

@@ -0,0 +1,23 @@
+{
+  "checks": [
+    {
+      "path": "s5/s5_power_adapter.py",
+      "sha256": "448f7a99cd08ead1d4e2b91907a66e8805261c9d24c9f55eed9a047fac48b57c",
+      "py_compile": "pass",
+      "ast_parse": "pass"
+    },
+    {
+      "path": "s5/s5_power_adapter_controls.py",
+      "sha256": "32d71db80994052b905829e6a2da38448ae789825c44570a901e67fe2d07fd33",
+      "py_compile": "pass",
+      "ast_parse": "pass"
+    }
+  ],
+  "executed": [
+    "py_compile",
+    "ast.parse"
+  ],
+  "functional_controls_executed": false,
+  "native_executed": false,
+  "accepted": false
+}

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR37_STATUS.md

@@ -0,0 +1,15 @@
+# REPAIR37 — bounded preparation submitted; no acceptance
+
+Two probe corrections preserve recovery inputs/save/restore: typed String snapshot staff versus StringName live staff, and rejected duplicate enqueue bound to the completed resource command. The completion hook still requires success; duplicate rejection must not emit command_completed. All payment, reservation, receipt, ledger, phase roster and Reader assertions remain unchanged.
+
+The adapter loads the existing series parser by spec_from_file_location and records its SHA256. Typed staff and duplicate checks bind both roles to their own completed commands. New pure controls verify every INDEX member sha/bytes before scratch creation, use the actual q36 pair, and require ValueError for the specified mutations including JSON-equal typed changes. Controls remain unexecuted.
+
+Read dependencies: local q36-writer-contract INDEX, TYPED_AUDIT, SAFETY_REAUDIT, command_queue.gd.reference, facility_instance.gd.reference, both before/resource-replay JSON records; series Node/variant and checker loader pattern. Raw fixture decoding and controls are reserved to Root. A shell heredoc failed before Python execution because shell temporary-file creation was denied; subsequent edits used python -c with no temporary files.
+
+Only py_compile and AST parsing are run, as recorded in REPAIR37_STATIC_CHECKS.json. No engine, Git, Runner, native run, other agent or /tmp operation was performed. No functional pass is claimed. Source basis remains 8e25213; counters remain 37, original 30/88, formal 16/88, P04 credit 0 and M c0ea009 frozen. p04-s5-DIAG-r36 remains FAILED without retrospective pass. All six D05 decisions are approved in the actual human record; adoption verification remains pending.
+
+Root order: py_compile → s5_uid_controls → adapter controls with explicit fresh BUILD scratch → fresh check-only plan → at most one fresh source-pinned diagnostic under a new name. UID sources/settings are unchanged. No full184 until the whole batch is ready.
+
+Context gap: whether current runtime submit_command emits command_completed on enqueue rejection is grounded only by the command_queue reference and TYPED_AUDIT raw. Root must observe this in the diagnostic; any emission remains a failure.
+
+Pending: S5 destruction/midnight/exit; S1–S4/collector fresh Q; full 184/329; whole independent Opus review; normal prepare/exact candidate/integration/final/Root join/ledger. No acceptance or completion is claimed.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR38_STATUS.md

@@ -0,0 +1,54 @@
+# REPAIR38 — superseded by REPAIR39_STATUS.md
+
+The shared-helper constraint below is historical and was explicitly resolved
+by the REPAIR39 direction: generalize `_queue` and `_reader` through one
+CASE_TABLE while preserving S5A/S5B behavior. It is no longer an open question.
+See REPAIR39_STATUS.md for the current batch status and missing source context.
+
+## Historical REPAIR38 record
+
+No implementation or acceptance is submitted by this attempt. No Python or
+GDScript source was changed. The A–F batch remains outstanding, not complete
+or admitted for native execution.
+
+The direction both freezes `_queue` and `_reader` as shared helpers and asks
+for new reservation-bearing cases with before/boundary/next/replay points.
+The existing helpers contain case-specific assertions and replay dispatch:
+
+- `s5/p04_s5_power_probe.gd::_queue` requires exactly one reserved inventory ID
+  only when `_case == "S5B_DEPENDENCY"`; every other case must have zero.
+  Using this unchanged helper for the required reservation-bearing S5C/S5F
+  queued request would fail its assertion even with correct runtime behavior.
+- `_reader` unconditionally calls `_assert_stopped` after loading boundary,
+  then replays the literal labels `held`, `recovered`, `duplicate_guard`.
+  Per-case `_labels` does not control that replay loop. New next/replay points
+  cannot be independently replayed through this loop as written.
+
+Required clarification: does “shared helpers stay unchanged” allow replacing
+these case-specific predicates/dispatch with case-table lookups while keeping
+S5A/S5B behavior and every existing assertion equivalent? Alternatively, are
+separate new-case queue/replay helpers authorized while the existing helpers
+remain exclusively the power-case implementation? No selection between these
+interpretations was silently made. This is an implementation-constraint
+question, not a request to reopen D05 or A01.
+
+Read context includes AGENTS.md, REPAIR37_STATUS.md, the existing S5 probe and
+wrapper, S5_ROOT_RUN.md, PENDING.md, D05_REMAINING_APPROVAL.json, Root's local
+q37-remaining-source-map/SOURCE_MAP.json and referenced facility and automatic
+defense sources. Root's M runtime reference is present; the worktree runtime
+is a different version and must not substitute for that reference.
+
+Only read-only source inspection and this status documentation were performed.
+No pure controls, py_compile, AST validation, probe_guard, engine, Git, Runner,
+native run, other agent, integration or /tmp operation was performed. No
+REPAIR38_STATIC_CHECKS.json claiming validation is supplied because no source
+checks were run. PENDING.md is not marked superseded: cases remain unimplemented.
+
+r35/r36 remain FAILED; Q37 remains a successful local diagnostic only. M
+c0ea009, original 30/88, formal 16/88 and P04 credit 0 remain unchanged. The
+15+EV requirements, seven domains, all six D05 decisions and A01 are unchanged.
+After clarification and completion of the entire source batch, Root's required
+order remains pure controls, check-only S1–S5 plan, focused fresh native S1–S5,
+fresh collect, full184/329 on final Q, index, --verify-only, independent review,
+and normal gates with Root join. None of these steps is authorized or claimed
+as performed by this worker status record.

docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR39_STATIC_CHECKS.json

@@ -0,0 +1,11 @@
+{
+  "task_id": "P04-01",
+  "repair": 39,
+  "status": "blocked",
+  "source_files_modified": [],
+  "checks_run": [],
+  "reason": "Documentation-only blocked record; required exact-version source context missing. No py_compile, AST, probe_guard or functional validation executed.",
+  "accepted": false,
+  "native_admissible": false,
+  "unit_accepted": false
+}