4444J99 · Oct 12, 2026
@@ -0,0 +1,186 @@
+# GES v0.2 fresh cloud provenance replay — October 12, 2026
+
+**Staged evidence.** The complete current claim-source provenance replay succeeded
+in the independent Linux cloud workspace at repository revision
+`6c37fe5eb98039341cb49444305703dc43048685`. Execution ran from
+`2026-10-12T20:15:26.719047+00:00` to
+`2026-10-12T20:17:15.825220+00:00`.
+
+This continuation depends on draft PR #503, which preserves the independently
+committed A3 identity through historical/current workload verification. PR #503
+depends on #497, and #497 depends on #496. Nothing in this record constitutes a
+merged-main result, human review, owner acceptance or release clearance.
+
+## Actual result
+
+| Measure | Observed value |
+| --- | ---: |
+| Locked public source repositories acquired | 6 |
+| Artifact identities matching the independent A3 reference | 13,657 |
+| Text artifacts authenticated for complete snapshot coverage | 11,828 |
+| Current claim documents | 655 |
+| Current raw claims with validated provenance | 61,941 |
+| Source artifacts referenced by current claims | 3,556 |
+| Validated duplicate relationships | 7 |
+| Current validated reconciliation receipts in the envelope-free command | 0 |
+| Unresolved claims in that command | 61,941 |
+
+All six archive digests matched their locked values. All six independently fetched
+Git trees reconciled with `MATCH`, without missing, extra or mismatched blobs.
+Snapshot verification checked the actual text content SHA-256, Git blob identity,
+size, source identity, uniqueness and complete text-artifact coverage.
+
+The source snapshots were newly acquired at their locked commits. Their metadata
+was compared with the preserved October 7 artifact rows, whose compressed and raw
+digests were checked before use. No source retrieval timestamp was backdated, and
+fresh snapshot bytes were not represented as the original cache bytes.
+
+| Binding | Actual digest |
+| --- | --- |
+| Complete current claim universe | `4c9c65b1c59f656d0a8bc423ee84c26e835754f7fca02ac4cc8df8e27f5bd20b` |
+| Catalog | `125555b58ee9cfc66af0fb335429911005f1f9ad1da555ea4f0acd51602ec24c` |
+| Proposals | `e16b506ada35741ea1d61f93bcf11b846893b643eb6e25eaed4a6edb70cf59d4` |
+| Preserved October 7 artifact metadata bytes | `86225491fb70197b893a0bfb1fa96ebfc1f5a6e33c21c86ab874d9d34f5db9a2` |
+
+The claim, catalog and proposal digests agree with the earlier correction audit.
+Agreement is now supported by actual source replay. It does not convert the earlier
+metadata-only observation into a historical full-replay result.
+
+## Execution and independent review
+
+The actual outer command, run from the repository root, was:
+
+```sh
+/usr/bin/timeout --signal=TERM --kill-after=3s 300s \
+  /usr/bin/prlimit --as=3221225472 --cpu=240:245 \
+  --fsize=536870912 --nofile=256 -- \
+  /opt/codex/runtimes/codex-primary-runtime/dependencies/python/bin/python \
+  -u .cache/cloud-replay-20261012/fresh_source_replay.py
+```
+
+`fresh-source-replay.v1.py` retains the exact executed driver bytes. Its SHA-256 is
+`cefd1049a88ef4515efad1407c82c09d681368455292998b82eb4949cafeddd4`.
+`execution.v1.json` records the exact two inner commands, source identities,
+acquisition hashes, timestamps and results. They were:
+
+| Command | Elapsed seconds | Exit |
+| --- | ---: | ---: |
+| `python -m ges.claim_review` with the retained artifact metadata and fresh snapshots | 8.801 | 0 |
+| `python -m ges.claim_reconciliation` with the same inputs and no receipt envelopes or receipt-authority policy | 10.926 | 0 |
+
+`claim-provenance.json` and `reconciliation-without-envelopes.json` are exact copies
+of the commands' stdout. Both repository input closures are retained without
+rewriting their paths or contents. The execution's source hash maps show continuity
+from acquisition verification through the beginning and end of claim replay.
+
+The distinct current reviewer `/root/migration_review` completed 2,855 explicit
+post-run checks in 1.023263 seconds. Its retained script independently reconstructed
+every current claim subject and all three canonical digests, checked exact current
+document membership and hashes, recomputed source identity projections, hashed the
+retained source files and repository inputs, and verified recorded hash continuity.
+The exact reviewer script is retained in `independent-replay-check.py.gz`; its decompressed SHA-256 is the script hash in the review. It observed regular files without symlink components at review time. It did not
+repeat acquisition or decompress all source bodies.
+
+The original v1 driver uses assertions for some outer guards and did not record its
+optimization mode. Its hash helper also did not reject symlinks. The independent
+post-run checker uses explicit conditions and documents what it actually checked;
+it does not invent historical process flags or file-type observations. Content and
+claim-span verification inside the reviewed repository modules use explicit
+exceptions. No unexecuted hardened successor driver is substituted for v1.
+
+The v1 field `historical_validated_dispositions_preserved: 2164` is a reference to
+prior historical accounting. **The source-replay driver did not revalidate those
+historical decisions.** The separately recorded replacement-decision comparison
+must be used for any preservation claim about the prepared ledger.
+
+## Workload migration and replacement decisions
+
+The historical report remains byte-preserved at its original 61,936 claims in 654
+documents. The separate current inventory contains 61,941 claims in 655 documents.
+The historical/current workflow and tests check both states; the A3 continuity
+repair does not merely replace expected counts. Removing exactly the five approved
+successor subjects reproduces the historical universe digest
+`9e4116b7a70772c94f59e1f5b1a27b1a736c15a8cae78341586a12bf8f80bd0d`.
+
+A separate, nonissued replacement package passed independent comparison against
+every one of the 2,164 historical subjects and decisions plus the ten specified new
+dispositions. The actual reviewer completed 144,504 explicit mechanical checks in
+1.619496 seconds, with zero carried-field mismatches, missing rows, extra rows or
+duplicates. All 19,476 preserved top-level field comparisons matched, including
+every subject, disposition, rationale, detail, control reference, unchanged
+catalog/proposal binding and nonadoption boundary.
+
+The same distinct reviewer separately read the authenticated WA source context
+and exact catalog/proposal records, and favorably reviewed all ten new dispositions.
+Those authored semantic findings are recorded in `independent-decision-review.json`;
+the check count does not represent automated semantic judgment. The proposed
+controls remain non-adopted and quarantined, without verified operational bindings.
+
+The reviewed draft has SHA-256
+`a8b9065b0a5a43e950451683badcbeaa335cc344bbce78940dac4420fb6d7185`
+and canonical digest
+`010aa6e9003301d96825cb1f34b317bafb401783e9f7462c40ac1c7d05bbb8e6`.
+Its exact scope is five predecessor supersessions and five successor specializations:
+five logical repairs, five added raw records and ten additional dispositions. All
+draft actor and issuance-time fields remain null. Preparation and comparison do
+not themselves issue an envelope or add current validated reconciliation credit.
+
+The existing owner grant names the original Codex root and its original
+`finishline_gates` reviewer. The actual current cloud actors are different. The
+current branch/cloud-work approvals do not supply a retained grant naming these
+replacement roles. No identity was substituted, no approval reference was
+manufactured and no timestamp was backdated. The original authorization and
+envelopes remain unchanged. A concrete current-role request is prepared separately
+and binds the complete reviewed decision package. Any later issued envelopes must
+be independently compared with that package under authentic authority and actual
+current timestamps; the earlier draft-review time cannot be reused for a later
+envelope review.
+
+The conditional result after authentic scoped issuance, independent envelope
+review and successful full accounting remains 61,941 known claims, 2,174 validated
+dispositions and 59,767 unresolved claims. That is not the result of the retained
+envelope-free command, and reconciliation would still be partial.
+
+## Execution location and historical-cache limits
+
+Mac admission governs processes running on the Mac. This replay ran on the
+independent Linux cloud executor with a 300-second deadline, a forced-kill grace
+period and explicit address-space, CPU, file-size and descriptor limits. A tiny
+TERM-ignoring-child test demonstrated deadline enforcement; its retained receipt
+records a 0.402-second duration and exit -9. The test's exact UTC was not recorded.
+No heavy Mac lease or Limen remote-broker admission is claimed for this execution.
+
+The original native transfer and existing private ciphertext are separate recovery
+routes. The attempted native pre-transfer stat failed at 20:14:51 UTC because the
+device was offline. No source bytes were read. The existing 1,204,940,832-byte
+private ciphertext exceeded the Drive connector's 268,435,456-byte whole-file limit;
+that call returned HTTP 413 and no bytes. No range route was exposed. The exact
+download-call timestamp was not captured; its failure receipt was recorded by
+20:11:00.228826 UTC. These observations are documented in `cloud-routing.json`.
+
+The successful fresh replay does not establish original-cache restoration,
+byte-for-byte preservation of the complete frozen A3 capsule, or authentication of
+the historical rendered-body cache. Source-to-claim omission completeness,
+remaining adapters and synthesis, the complete public disposable pilot, publication
+clearance, human review, owner acceptance and merged-main checks remain separate.
+Private pilot support remains unverified.
+
+## Retention and restart
+
+This directory contains original execution outputs, their independent audit and
+metadata only. Raw source bodies and nonissued decision drafts remain in private
+working storage. `manifest.json` lists the public files and their SHA-256 values.
+
+To inspect the executed revision, use a separate checkout at `6c37fe5`. The v1
+driver is an exact execution record, including its original cache paths and
+revision guard. Do not run it over an existing cache or change its bytes and then
+claim to have repeated the same execution. For a new replay, use a fresh isolated
+directory, preserve the locked inputs, assign a new execution record and bounded
+deadline, and independently compare its actual outputs.
+
+Before issuing replacement envelopes, authenticate the retained private package
+against its recorded digest, obtain the exact current-role grant, preserve every
+carried decision, use actual current reconciler/reviewer timestamps, and rerun
+`ges.claim_reconciliation` against the authenticated inputs with both the real
+policy and real receipts. Record the actual result, including the complete
+denominator. Do not use the conditional arithmetic as a substitute.
@@ -0,0 +1,126 @@
+{
+  "schema": "ges.cloud-routing-publication.v1",
+  "prepared_at": "2026-10-12T20:24:18.777831+00:00",
+  "prepared_by": "/root/cloud_transport",
+  "status": "FRESH_CLOUD_REPLAY_PASSED_ORIGINAL_CACHE_RESTORATION_OPEN",
+  "execution_location": {
+    "executor": "current cloud Linux workspace",
+    "native_host_execution": false,
+    "mac_admission_applies_to_cloud": false,
+    "distinction": "Mac admission governs commands executing on that Mac. The independent Linux cloud executor has its own resource limits."
+  },
+  "cloud_replay": {
+    "head": "6c37fe5eb98039341cb49444305703dc43048685",
+    "scope": "FRESH_PINNED_SOURCE_REPLAY_WITH_PRESERVED_OCT7_ARTIFACT_METADATA",
+    "started_at": "2026-10-12T20:15:26.719047+00:00",
+    "completed_at": "2026-10-12T20:17:15.825220+00:00",
+    "status": "PASS",
+    "known_claim_denominator": 61941,
+    "claim_documents": 655,
+    "artifact_rows": 13657,
+    "text_artifacts_authenticated": 11828,
+    "artifact_inventory_sha256": "86225491fb70197b893a0bfb1fa96ebfc1f5a6e33c21c86ab874d9d34f5db9a2",
+    "claim_input_digest": "4c9c65b1c59f656d0a8bc423ee84c26e835754f7fca02ac4cc8df8e27f5bd20b",
+    "full_current_claim_source_provenance_replayed": true,
+    "input_closure_unchanged": true,
+    "source_inputs_unchanged": true,
+    "new_reconciliation_credit": 0,
+    "validated_current_receipts": 0,
+    "historical_validated_dispositions_from_prior_report": 2164,
+    "historical_dispositions_qualification": "Quoted from the prior historical validation report; the fresh pinned-source replay did not revalidate the historical receipts or their decision membership."
+  },
+  "command_observations": [
+    {
+      "name": "claim-provenance",
+      "started_at": "2026-10-12T20:16:55.960635+00:00",
+      "elapsed_seconds": 8.801,
+      "exit_code": 0,
+      "log_sha256": "c174b9b941667bdbbcc5a35b548ac403e7763112e3926f31704242c33b76fcd6"
+    },
+    {
+      "name": "current-reconciliation-without-envelopes",
+      "started_at": "2026-10-12T20:17:04.762568+00:00",
+      "elapsed_seconds": 10.926,
+      "exit_code": 0,
+      "log_sha256": "f928b74702aba91bf3ac74746fc473a3de1b5637378b4c71d7210c568187a7a6"
+    }
+  ],
+  "retained_native_metadata": {
+    "observed_at": "2026-10-12T20:09:23.928638+00:00",
+    "operation": "bounded metadata inspection",
+    "body_files_read": false,
+    "full_cache_authenticated": false,
+    "rendered_index_declared_bodies": 18019,
+    "rendered_index_declared_uncompressed_body_bytes": 183861830
+  },
+  "original_native_transfer": {
+    "observed_at": "2026-10-12T20:14:51Z",
+    "operation": "read-only pre-transfer stat of first original snapshot",
+    "status": "BLOCKED_DEVICE_OFFLINE",
+    "native_stat_received": false,
+    "payload_bytes_received": 0,
+    "source_bytes_read_by_transfer": 0,
+    "destination_created": false,
+    "further_transfer_attempts": 0,
+    "mac_admission_denial_is_the_observed_cause": false
+  },
+  "existing_private_ciphertext": {
+    "documented_remote_object": "gdrive:limen-custody/sessions/40452c935232540d16ff7770bf68d8fd31d8111e347535289a16cbab130f2783.enc",
+    "documented_sha256": "40452c935232540d16ff7770bf68d8fd31d8111e347535289a16cbab130f2783",
+    "provider_metadata_bytes": 1204940832,
+    "provider_metadata_created_at": "2026-10-03T19:00:29.463Z",
+    "private": true,
+    "sharing_changed": false,
+    "download_status": "BLOCKED_CONNECTOR_SIZE_LIMIT",
+    "http_status": 413,
+    "connector_whole_file_limit_bytes": 268435456,
+    "downloaded_bytes": 0,
+    "file_uri_returned": false,
+    "retry_count": 0,
+    "fresh_ciphertext_sha256_verified": false,
+    "decrypted": false,
+    "secret_read": false,
+    "exact_download_call_timestamp": "NOT_RECORDED",
+    "attempt_receipt_recorded_by": "2026-10-12T20:11:00.228826+00:00",
+    "original_cache_membership_authenticated": false
+  },
+  "remaining_boundaries": {
+    "historical_original_cache_restored": false,
+    "original_a3_capsule_fully_authenticated": false,
+    "rendered_cache_authenticated": false,
+    "replacement_envelopes_issued": false,
+    "new_semantic_review_credit": 0,
+    "source_to_claim_omission_completeness_certified": false
+  },
+  "source_receipts": [
+    {
+      "retained_source": "ges/.cache/cloud-replay-20261012/fresh-pinned/execution.json",
+      "sha256": "da51b1279a8a7bd6b671193774180e2eab406049b9b6af1729b9f2ef83840937"
+    },
+    {
+      "retained_source": "cloud_transport_findings.json",
+      "sha256": "2cb9b65d9923e88e1778ff9745a921e5a1442b9481e2bc80514ad9ceb2922e26"
+    },
+    {
+      "retained_source": "cloud_transport_download_attempt.json",
+      "sha256": "777734b26ea976cac23f98996b0d26524836d28943f51764f911f79d3e9b9cb3"
+    },
+    {
+      "retained_source": "atapas_transfer_blocked_device_offline_20261012.json",
+      "sha256": "f1349ded5702c0e800f82413ca18bb9ccec73d8fb7ff8d6380746079d91c6910"
+    },
+    {
+      "retained_source": "ges_cloud_transport_investigation_20261012.json",
+      "sha256": "909dee23442f0c1809962369b05fab300d4d7dacdc05167f7e228b875abfd8e4"
+    },
+    {
+      "retained_source": "ges_native_transport_observation_20261012T200923Z.json",
+      "sha256": "0345db9f614372251c059189abecbc1cbe02840f7fe75007f7d3abbca8b29d36"
+    },
+    {
+      "retained_source": "ges/evidence/session-closeout-456-custody.json",
+      "sha256": "d29d81d30357843fd6b6b37e6c8a41649f21289a0603117fafb3c1d1a786d5ad"
+    }
+  ],
+  "publication_scope": "Metadata and proof boundaries only. No raw source bodies, ciphertext, private Drive file URL/ID, native absolute paths, credential locator or secret values are included."
+}
@@ -0,0 +1,31 @@
+{
+  "acceptance_gate_closed": false,
+  "cumulative_previous_tranche_usage": "UNKNOWN_PLUS_PREVIOUSLY_RECORDED_USAGE; not reset",
+  "current_role_grant_recorded": false,
+  "draft_preparation_deadline_seconds": 30,
+  "draft_preparation_exec_observed_seconds": 7.048430531,
+  "execution_location": "independent cloud Linux workspace",
+  "independent_decision_check_actual_seconds": 1.619496,
+  "independent_decision_check_deadline_seconds": 60,
+  "independent_decision_optimization_guard_actual_seconds": 0.138829,
+  "independent_decision_optimization_guard_deadline_seconds": 5,
+  "independent_replay_check_actual_seconds": 1.023263,
+  "independent_replay_check_deadline_seconds": 30,
+  "native_heavy_lease_acquired": false,
+  "native_heavy_work_started": false,
+  "public_package_integrity_check_reserved_deadline_seconds": 30,
+  "recorded_at": "2026-10-12T20:32:53.237646+00:00",
+  "remaining_activity": "Bounded metadata integrity, evidence publication, private input retention and external-state readback.",
+  "replacement_draft_independently_compared": true,
+  "replacement_envelopes_issued": false,
+  "schema": "ges.cloud-continuation-boundary.v1",
+  "source_provenance_replayed": true,
+  "source_replay_actual_wall_seconds": 109.106173,
+  "source_replay_head": "6c37fe5eb98039341cb49444305703dc43048685",
+  "source_replay_outer_deadline_seconds": 300,
+  "status": "STAGED_FRESH_CLOUD_EVIDENCE; roles and final receipt accounting pending",
+  "tiny_deadline_probe_actual_seconds": 0.402,
+  "tranche_deadline": "2026-10-12T20:36:26Z",
+  "tranche_started_at": "2026-10-12T20:06:26Z",
+  "verification_budget_seconds": 600
+}
@@ -0,0 +1,17 @@
+{
+  "schema": "ges.cloud-deadline-check.v1",
+  "executor": "current cloud Linux workspace",
+  "command": [
+    "/usr/bin/timeout",
+    "--signal=TERM",
+    "--kill-after=0.2s",
+    "0.2s",
+    "/opt/codex/runtimes/codex-primary-runtime/dependencies/python/bin/python",
+    "-c",
+    "import signal,time; signal.signal(signal.SIGTERM, signal.SIG_IGN); time.sleep(10)"
+  ],
+  "exit_code": -9,
+  "elapsed_seconds": 0.402,
+  "terminated_term_ignoring_child": true,
+  "native_host_used": false
+}