Token E2E preregistration guard: match any user's project directory, not this host's name - #459

… hashes

Rebased onto main dd99677. On the
first rebase, onto 9f8db58, the
manifests/evidence.json conflict was resolved by taking main's version;
main's next commit (#459) then applied without conflict. This commit
re-registers the branch on top of main's manifest:

- receipts[]: the two entries from this PR's original registration
  commit 19e5f29, appended verbatim after main's last entry; each
  equals its receipt file's id, kind, component_ids, claim and
  limitations.
- files[]: scripts/host_receipts.py register_file for all 31 paths in
  `git diff --name-only origin/main...HEAD`: the 29 PR files (the two
  receipt files inserted) and the two grand-dashboard files last.
  Re-running register_file for those paths on dd99677 leaves the
  manifest byte-identical.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

…ication receipts (#446)

* Pin socraticode 1.15.0 (Linux) and ccusage 20.0.26 with qualification receipts

SocratiCode 1.15.0 moves the Linux pin, launcher templates and examples after
the user waived the 7-day cooldown. The unchanged upstream suite passed at
f6191f07, pre-cutover native checks ran against production services, and the
workstation cut over at 2026-09-27T21:42:49Z. The macOS pin stays 1.14.0
(MAC_PIN_LAGS_LINUX). The receipt records the partial all-sessions state: two
1.14.0 MCP children remained at 02:03:14Z, and the stored graph was still
built by v1.15.0 at about 02:07Z.

ccusage 20.0.26 fires the 2026-09-26 publication trigger. At d9821088 the
upstream Rust suite passed (944/0/3), the Node tests passed 34/34, the
native_token_ci fixture is byte-identical across versions, and daily, weekly
and monthly native token totals are unchanged. 20.0.26 prices claude-opus-5-5
and gpt-6-luna, which 20.0.24 left unpriced. The workstation launcher switched
at 2026-09-27T22:01:01Z. Linux and macOS pins move together; macOS rests on
registry evidence only.

Also updates the saturation-audit rows, the upstream-snapshot and landscape
release identities, the recipes row, the decision records and the generated
new-host grand list. Landscape winner pins stay unchanged, so host receipts at
the new versions need --allow-unbound-version.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

* PR #446 review repairs: per-platform SocratiCode path, token guide rows, receipt wording

R1: the Codex user template ran tools/socraticode-1.15.0 on every platform,
while the macOS pin and bootstrap install 1.14.0. render_config.py now derives
${SOCRATICODE_VERSION} from the selected platform's pin, as it derives
${AI_MEMORY_BIN}; --set SOCRATICODE_VERSION names another install. New
SocratiCodeVersionTests render both platforms (Linux 1.15.0, macOS 1.14.0) and
fail against the old literal template.
R1b: the examples and recipes name the per-platform version.
R2: docs/token-efficiency-stack.json installs socraticode 1.15.0 (with
--before and the macOS 1.14.0 exception) and ccusage 20.0.26.
R3: the socraticode receipt gives the stale-graph cause its own times show,
records the post-cutover scratch Codex home that still names 1.14.0, and
relabels the notifications/message zero-matches as untested.
R4: the ccusage receipt drops the token-guide deferral, discloses the daily
comparison's unretained argument vector, and names the dated blueprint parser.
R5: docs/stack.md keeps its September 19 snapshot value.
R6, R7: provenance sentences in pins-macos-arm64.json and foundation-stack.md.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

* Grand dashboard: the evidence manifest gets its own read bound

Carry only the observability/grand-dashboard/progress.py and
tests/test_grand_dashboard.py hunks of
499a661 on
origin/claude/prompt-audit-instructions-20260927 (two-file
`git patch-id --stable` 8f693abd4c60119019b7a419b4cca4344ac4deed).
That branch's decision and control files are not taken.

With this PR's two receipts registered, manifests/evidence.json passes
the 2,000,000-byte MAX_BYTES bound that progress.py applies to every
source. The manifest gets its own SOURCE_MAX_BYTES bound of 8,000,000;
every other source keeps MAX_BYTES.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

* Register the socraticode 1.15.0 and ccusage 20.0.26 receipts and file hashes

Rebased onto main dd99677. On the
first rebase, onto 9f8db58, the
manifests/evidence.json conflict was resolved by taking main's version;
main's next commit (#459) then applied without conflict. This commit
re-registers the branch on top of main's manifest:

- receipts[]: the two entries from this PR's original registration
  commit 19e5f29, appended verbatim after main's last entry; each
  equals its receipt file's id, kind, component_ids, claim and
  limitations.
- files[]: scripts/host_receipts.py register_file for all 31 paths in
  `git diff --name-only origin/main...HEAD`: the 29 PR files (the two
  receipt files inserted) and the two grand-dashboard files last.
  Re-running register_file for those paths on dd99677 leaves the
  manifest byte-identical.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

---------

Co-authored-by: Scout <scout@local>
Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]>