Currency wave W1b: grafana 13.2.3 (security release) and agent-browser 0.38.2 - #645

…t paths

Retains under evidence/artifacts/currency-wave-w1-20261003/judgments/ the nine Opus move judges of W1-moves.json with
its seven holds_not_in_scope strings (move-hold-judges.json), the Opus and Sol #642 reviewer start events and results
(review-round-findings.json) and the R642 and R642b repair replies (repair-round-replies.md, repair-round-2-replies.md),
and adds a Judgment custody paragraph to the W1 decision record. Same request as the Codex root lane's finding 2 on #645
(comment of 2026-10-03T09:06Z): the PRs kept only short excerpts of the reviewer models' judgments.

Sanitization: coordination-folder absolute paths reduced to their file name, the home path replaced by <home>; nothing
else changed. The reply files are byte copies of the coordination copies (no host path occurred in them). The move
judges are complete; the seven holds_not_in_scope strings are kept as the source packet recorded them, already cut at
600 characters. move-hold-judges.json keeps the source's wave, workflow_run, moves.<component>.judge and
holds_not_in_scope and drops the facts; review-round-findings.json holds the four journal lines of workflow
wf_267d65f8-7f6 for #642 (two started, two result) in file order. Both JSON files use the source writer's format.
Privacy scan for apoth, henosis and @gmail: zero hits. The literal /home/ appears five times, all in quoted reviewer
text that is not a host path (/home/<user> twice, /home/<segment>, $S/home/..., /home/example/).
Checks: validate.py, validate_convergence.py --all-recorded and the three pre-push registry tests exit 0.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

### Scope

- Select one default for each logical NativeStack2604 host tool and name every coordinated consumer amendment. This decision exposes the bootstrap/trading/CI pin split without claiming it has already been resolved.
- Base commit: `67c6b6f94b456a3a7b5d28bb1fa34625a808d316`.
- Lane: exactly `lane:foundation`; this PR remains draft for the command center's cross-family read.
- Owned paths: two dated decisions, resolver watch documentation, source/version and partial context-review artifacts, sanitized assignment metadata, evidence registry last. Live bootstrap/profile/install-plan/CI and trading files are not edited. Currency's consumer follow-up starts only after #642/#645 land, or is folded by 5f's request; fixwave-defects owns #723/#776, github-ci-finalize owns the CI uv/hash, and 5f owns the trading gate/digest.

The canonical defaults are Node24.21.0,uv0.12.22,gh2.102.0,host Python3.13.16,Codex0.160.1,Claude2.1.292,Harbor0.24.0,Collector0.162.0 andvLLM0.31.0. This is a decision and owner handoff. Claude's ordinary cooldown and Harbor/vLLM qualification remain gates; the trading project's Python3.12.3 remains a separate project requirement.

The executable bootstrap consumes pins-linux-x86_64.json, so a profile summary edit alone would leave drift. 5f must fold the uv0.12.22 gate and verified sync-vector digest together. CI's promotion uv/hash and Python's family-versus-patch selection are named explicitly. C5's reopened context audit is ongoing in this same PR: the command center assigned the NativeStack2604 resolver loop to currency. Seven of nine items have primary review evidence; two Codex tagged-source checks remain pending. Nice19 local publication validation passed on the rebase and is rerun for the J805 fixes. No instruction/template file is edited. Preserve unrelated rows, update the three existing document rows by key, and append only newly reviewed name rows. These final catalog changes are pending; the live catalog remains unchanged.

## SOTA sources

- [0d5e6506:profile defaults:4655](https://github.com/seathatflowsinourveins/native-agent-stack/blob/0d5e6506434fab598dee861c749a22e628beb75a/adoption/new-wsl-profile.json#L4655), [plan mise pins:6-15](https://github.com/seathatflowsinourveins/native-agent-stack/blob/0d5e6506434fab598dee861c749a22e628beb75a/evidence/artifacts/new-wsl-install-plan-20261002/mise.toml#L6-L15), [bootstrap artifact consumer:233](https://github.com/seathatflowsinourveins/native-agent-stack/blob/0d5e6506434fab598dee861c749a22e628beb75a/adoption/bootstrap-linux.sh#L233), [native newer-client preservation:843](https://github.com/seathatflowsinourveins/native-agent-stack/blob/0d5e6506434fab598dee861c749a22e628beb75a/adoption/bootstrap-linux.sh#L843): exact split and qualified preservation policy.
- [Node v24.21.0](https://nodejs.org/en/blog/release/v24.21.0), nodejs/node@955266bf; [uv0.12.22](https://github.com/astral-sh/uv/releases/tag/0.12.22), astral-sh/uv@70fe1196; [gh2.102.0](https://github.com/cli/cli/releases/tag/v2.102.0), cli/cli@fc4b137c; [Python3.13.16](https://www.python.org/downloads/release/python-31316/), python/cpython@cbc944f4: plan-aligned maintained host defaults and release dates.
- [Codex rust-v0.160.1](https://github.com/openai/codex/releases/tag/rust-v0.160.1), d27764b8; [Claude v2.1.292](https://github.com/anthropics/claude-code/releases/tag/v2.1.292), release-repository fbe20e00; [Harbor v0.24.0](https://github.com/harbor-framework/harbor/releases/tag/v0.24.0), b53b8134; [Collector v0.162.0](https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.162.0), ae8c5075 and [distribution](https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.162.0), f6159a77; [vLLM v0.31.0](https://github.com/vllm-project/vllm/releases/tag/v0.31.0), db9527a4: F12 selected targets, identities and pending gates.
- [Trading sync pins:8-9](https://github.com/seathatflowsinourveins/native-agent-stack/blob/0d5e6506434fab598dee861c749a22e628beb75a/blueprints/us-equities/runtime-2604/sync-trading-2604.sh#L8-L9), [verified vector:84-88](https://github.com/seathatflowsinourveins/native-agent-stack/blob/0d5e6506434fab598dee861c749a22e628beb75a/blueprints/us-equities/runtime-2604/install-trading-2604.sh#L84-L88), [uv gate:112](https://github.com/seathatflowsinourveins/native-agent-stack/blob/0d5e6506434fab598dee861c749a22e628beb75a/blueprints/us-equities/runtime-2604/install-trading-2604.sh#L112): exact 5f handoff; no trading file edit.

C5 primary sources: [Claude memory](https://code.claude.com/docs/en/memory), [skills lifecycle](https://code.claude.com/docs/en/skills#skill-content-lifecycle), [environment reference](https://code.claude.com/docs/en/env-vars), [network trust](https://code.claude.com/docs/en/network-config#ca-certificate-store), [official Codex Markdown AGENTS guide](https://learn.chatgpt.com/docs/agent-configuration/agents-md.md), read2026-10-06; [Claude2.1.292 changelog](https://github.com/anthropics/claude-code/blob/fbe20e00e2851fc01506f54f98a8f0b875af3847/CHANGELOG.md). Installed Claude artifact/byte windows and qualified comparison limits are in review.json; assignment source is resolver-assignment.json.

J805 fixes: the residual map covers the exact Codex lane guard, uv CI downloader/hash, generated installer/acceptance/Python selections, Inspect/Scout's Harbor package, producer contract, vLLM/Collector recipes and inactive template. SDK/bundled CLI0.160.0, dedicated SDK interpreter, dated holds, rollback and macOS pins are classified separately. The idleCompaction source now names the actual byte-window line113; row updates are by key, not duplicates. No executable pin/guard is changed by this decision PR.

### Evidence-class table

| Claim | Evidence class | Command / receipt |
| --- | --- | --- |
| Profile, bootstrap, plan, CI and trading consumers differ | source_review | Immutable main reads and exact linked locators |
| Installed host-tool versions match the plan; F12 drift is dated | local_integration, read-only version observation | selection.json; normalized versions and command labels explicitly identified |
| Selected default versions have official release identities/dates | source_review | Maintainer release/ref metadata; no downloaded-asset verification or new runtime acceptance |
| Every in-scope consumer is named; qualification is not inferred | source_review, independent completeness critic | 0P1/0P2; two P3 provenance refinements corrected |
| Publication integrity | local_integration | Nice19 validate.py exit0 after registration; this is integrity/scope evidence only |

### Local commands run

```text
Fresh owned worktree creation from origin/main with Worktrunk --no-hooks
exit0; hooks skipped for the paper window; original worktrees preserved.
Installed --version and cached official release/ref reads
exit0; source ledger records normalized versions, not full argv/raw outputs.
Independent bounded completeness critic
0P1/0P2; two P3 source/provenance refinements fixed.
git diff --check / staged whitespace check
exit0.
host_receipts.register_file for the two owned new files
exit0; registry-only commit LAST.
python3 scripts/validate.py
Exit0 under the later REBASE-805/J805 authorisation for light checks with the paper session inactive; repeated after J805 evidence registration.
```

### Open shared-file neighbours

#802, #770, #769 and #764 also edit upstream-surface-dispositions.json. Rebase after any lands first and take main's catalog. Preserve unrelated rows, update the three existing document rows by key, and append only newly reviewed name rows. Keep #802's corrected context_management source locator. Queued branches remain 5f-only. This PR remains currency-written and draft while the review completes.

J805 checks:6 DispositionCitationTests pass (nice19), actual proposed source113 passes the existing predicate while old line1 is rejected, and bounded independent completeness critic reports no remaining material P2. Source-review findings are not new runtime acceptance.

### Decision record

`docs/decisions/2026-10-06-one-host-tool-default.md` names defaults, full residual inventory/exceptions, owners and overturn conditions. `docs/decisions/2026-10-06-harness-context-budget-refresh.md` records the reopened partial C5 review and proposed CC-only sentences. Executable one-pin acceptance remains pending owners' folds.

### Host evidence

No evidence/hosts or platform-status change. Version output is not native adoption or a passed new host run.

- [ ] Host-receipt validation: not applicable.
- [x] Independent source/consumer completeness read recorded.
- [x] No platform-status update inferred.

### Checklist

- [x] No Actions/workflow permissions change.
- [x] No credential values/files read or committed; no new required secret.
- [x] No paid hosting/subscription/billing surface.
- [x] Peer-owned files, historical receipts, main and other worktrees preserved.
- [x] Registry committed last; draft retained.
- [x] Nice19 local publication validation passed for the registered J805 content; no native acceptance inferred.

### Scope

Route catalog lookup through QMD's lexical queries and bounded document retrieval; use SocratiCode for semantic catalog search at the main checkout's projectPath. Keep reranking available and prohibit qmd embed/pull. Update current maintenance recipes and native instruction carriers through the repository renderers.

Existing Serena consumers read its manual before navigation, and jCodeMunch consumers obtain the current guide before a typed route with the actual caller model and execution off. Four existing Claude roles gain only Serena's manual tool. Reviewer/builder keep their no-menu boundary, and a focused read of a known path and line remains valid.

This landing repair appends the preregistration's Amendment4 to bind the deliberately changed role bodies and compacts lane-authored RTK explanations within the unchanged compact and startup budgets. The entire composed pre-RTK prefix, upstream awareness, owner's blocks, exact SKILL line, seven exceptions, models and effort are preserved. Prior amendment rows, observations, seals and RUNBOOK bytes remain unchanged.

The canonical code-graph rename is prepared as a separate patch and is excluded from this head under command-center ruling081016Z. Main's existing names remain in both templates, the map, fixtures and carriers. The protected lane token requires the owner's word before the rename can land. Until that follow-up, this host's Claude code-graph access is through the vendor's hook channel only; the stale MCP carrier id is a recorded limitation and is not claimed fixed.

- Base commit: `c44993b379da25fae923dbbe70188978af5104aa` (verified native source; #803 already landed).
- Lane: `lane:foundation`; draft.
- Head: `9985e468fa4997d22630714b2fa6a76666e3cda9`. Native bytes: compact 8076 <8192, rendered 9142, three-file startup 20101 <=20103; full Claude block 4087 <=4100. These are byte gates, not token-use measurements.
- Owned paths: token-lane carriers and their paired handbook text, minimal manual grants and mirrors, Codex template/rendered copies, native loader/routing/sequence tests, current recipes and generated handbook, append-only decisions/preregistration amendment, follow-up receipts and checksum/registry projections.
- ROLE-CARRIER-GAPS and ROLE-GRANTS are separate future work and stay out of this change.

Landing path: explicit command-center cue070358Z and fallback ruling081016Z permit one pushed rebase/content repair onto then-current main while #802/#813/#830 land. The co-op performs the new-head delta read with its CI result; the command center ACKs; 5f lands. A further pushed rebase requires the separate dated landing-conflict cue. Host configuration, cutover and fresh-session/working-day acceptance belong to their owners.

## SOTA sources

- [QMD v2.8.3 lexical query](https://github.com/tobi/qmd/blob/v2.8.3/src/mcp/server.ts#L294), [typed searches/rerank](https://github.com/tobi/qmd/blob/v2.8.3/src/mcp/server.ts#L321) and [document retrieval](https://github.com/tobi/qmd/blob/v2.8.3/src/mcp/server.ts#L412): native lexical subqueries, retrieval and optional rerank. Rerank defaults true (:334-335). [README maintenance syntax:1033-1037](https://github.com/tobi/qmd/blob/v2.8.3/README.md#L1033-L1037) supplies bounded commands.
- [SocratiCode v1.15.0 codebase_search](https://github.com/giancarloerra/SocratiCode/blob/v1.15.0/src/index.ts#L138): semantic search at an absolute projectPath. Owner ruling224125Z selects the routing and preserves rerank-on acceptance; this PR performs no host cutover.
- [Serena c6fbd1c5 manual order](https://github.com/oraios/serena/blob/c6fbd1c5932df2494ffa0020af5a9fbe80b82143/src/serena/resources/config/prompt_templates/system_prompt.yml#L5-L6), [manual tool:28-40](https://github.com/oraios/serena/blob/c6fbd1c5932df2494ffa0020af5a9fbe80b82143/src/serena/tools/workflow_tools.py#L28-L40) and [project/session binding:44-49](https://github.com/oraios/serena/blob/c6fbd1c5932df2494ffa0020af5a9fbe80b82143/src/serena/tools/config_tools.py#L44-L49): manual first, active cwd project and returned session id for switches.
- [jCodeMunch 1.108.330, 28803366, typed route:446-463](https://github.com/jgravelle/jcodemunch-mcp/blob/288033668f0425ab0547f420dd647c14bd186c7f/src/jcodemunch_mcp/server.py#L446-L463), [guide:4743-4752](https://github.com/jgravelle/jcodemunch-mcp/blob/288033668f0425ab0547f420dd647c14bd186c7f/src/jcodemunch_mcp/server.py#L4743-L4752) and [policy:101-128](https://github.com/jgravelle/jcodemunch-mcp/blob/288033668f0425ab0547f420dd647c14bd186c7f/src/jcodemunch_mcp/cli/policy.py#L101-L128): guide-first and typed task/model route. These files are unchanged at target1.108.331/d94049d0. The executable schema corrects the guide's query example; no new adaptive-tier setting or upstream rebuild.
- `native-agent-stack@c44993b:tests/test_token_e2e_preregistration.py:637-663,905-909`: later dated role-pin amendment and sealed RUNBOOK contracts. Amendment4 preserves every earlier row/seal and extends the current-row selector. The command center records merge chronology at landing; this is a structural repair and authorizes no run.
- [DeusData/codebase-memory-mcp v0.11.0 release](https://github.com/DeusData/codebase-memory-mcp/releases/tag/v0.11.0), the repository's pinned component, and the command center's native-client read-back identify the canonical server name. Its proposed client-key/wire-id/owner-token correction is kept in the separate patch, preserving every payload and strict fixture. Ruling081016Z explicitly keeps main's names in this publication while the owner's instruction-token decision remains open.
- RTK explanation provenance: `native-agent-stack@2d849ba` (#726) and `@50b9579` (#389), `adoption/templates/codex.AGENTS.template.md` after its exceptions marker. The eight explanations shorten while all facts and protected bytes remain. Command-center064832Z accepted their class and scoped wording.
- Native helpers at `native-agent-stack@c44993b`: `tools/adoption/managed_block.py:169` (`codex_block`), `tools/adoption/codex_roles.py:287` (`f4_block`), `scripts/host_receipts.py:710` (`register_file`), `docs/lanes.md:94-128`. Current generated inventory/handbook and checksum bindings use those repository tools; historical receipts and the frozen catalog passage are preserved.

### Evidence-class table

| Claim | Evidence class | Command / receipt |
| --- | --- | --- |
| Documented native routing/manual/guide interfaces | source_review | Pinned upstream files above |
| Carrier rendering, protected bytes, new body pins and tool ids | local_integration | Existing native helpers, hashes and required modules |
| Permission/sequence/byte-mutant/frozen-row controls | synthetic | Existing tests with assertions preserved |
| Deployed use and token savings | Pending owner evidence | No model, host apply or working-day measurement in this repair |

### Local commands run

```text
$ CI=true nice -n 19 ionice -c3 python3 -B -m unittest tests.test_token_lanes_session_start tests.test_token_lanes_subagent_start tests.test_scaffold_repo tests.test_new_wsl_handbook tests.test_adoption_docs_consistency tests.test_codex_agents tests.test_codex_roles tests.test_codex_worker_lane tests.test_token_e2e_preregistration tests.test_new_wsl_client_config.RecordTests tests.test_install_claude_profile tests.test_managed_block tests.test_task_model_routing tests.test_new_wsl_client_config.MapTests tests.test_new_wsl_client_config.AgentGapTests tests.test_new_wsl_client_config.RenderTests tests.test_new_wsl_client_config.ApplyTests.test_the_first_run_writes_what_the_wired_pieces_name_and_nothing_else
exit 0; Ran 595 tests in 109.929s; OK (skipped=14)

$ CI=true nice -n 19 ionice -c3 python3 -B -m unittest tests.test_install_claude_profile tests.test_adoption_docs_consistency tests.test_new_wsl_client_config.RecordTests
exit 0; Ran 150 tests in 16.306s; OK (skipped=2)

$ CI=true nice -n 19 ionice -c3 node examples/claude-native/workflows/test-envelope.mjs
exit 0; SUMMARY passed=254 failed=0 total=254

$ CI=true nice -n 19 ionice -c3 python3 -B tools/adoption/new_wsl_client_config.py --check --markdown
exit 0

$ CI=true nice -n 19 ionice -c3 python3 -B scripts/build_new_wsl_handbook.py --check
exit 0
```

The passing 595-test run is retained on unchanged source/assertion inputs from the pre-window checkpoint; the 150-test run checks the concrete relocation-fixture and workflows-README changes in the new main base. Their counts overlap and are not added. The fresh Node run passes 254/254. Strict checksums in both Codex directories and the Claude hook directory, plus `git diff --check`, exit 0. All three Amendment-4 role digests were re-derived in both copies and are unchanged from the previous published head.

```text
$ CI=true nice -n 19 ionice -c3 python3 -B scripts/validate.py
exit 0; 69 components, 10,482 hashed files, 4 profiles, 224 receipts, status passed
```

The earlier landing composition used source `630b6ece8485a7710ea51321682d5a12e364e25c` and hot commit `5703ef1061b982078038425fada888fd35153868`; its native checks and source-critic result are retained. The authorized locator follow-up changes only `catalogs/foundation/upstream-surface-dispositions.json` and that file's registry row: the `otel.environment` citation now points to the command at `examples/codex-native/README.md:214`. Source commit `2b36cfee` is followed by registry-last commit `9985e468fa4997d22630714b2fa6a76666e3cda9`, with no further rebase. Claude/Codex instruction bytes, role hashes, historical records, namespace and byte budgets remain unchanged.

The registry starts from exact main `c44993b379da25fae923dbbe70188978af5104aa`, registers the same 67 changed-file rows through the native producer, and preserves main's receipt and convergence arrays. The two-file correction passed the 114-test citation module, the two exact failing methods and a second native validator run. The worktree is clean; the shifted-citation scan found no other current target to repair. Historical before/after references remain intact.

```text
$ CI=true nice -n 19 ionice -c3 python3 -B -m unittest tests.test_upstream_surface_watch
exit 0; 114 tests, 6 skipped

$ CI=true nice -n 19 ionice -c3 python3 -B -m unittest tests.test_upstream_surface_watch.DispositionCitationTests.test_every_cited_line_names_the_key tests.test_upstream_surface_watch.DispositionCitationTests.test_a_dotted_key_has_its_parent_near_the_citation
exit 0; 2 tests

$ CI=true nice -n 19 ionice -c3 python3 -B scripts/validate.py
exit 0; integrity and scope passed
```

The hosted run at5703 returned two failures in11,495 tests because the documentation locator moved. A reviewed locator still gates when its repository test fails. This follow-up closes that exact contract; it adds no assertion waiver or namespace change.

Read-only overlap metadata checked all 47 open PRs, including full file pagination where needed. Source overlaps: #645, #706, #709, #754, #769, #770, #775, #776, #795, #810, #821, #826, #829. Shared registry/checksum paths use the hot-file protocol; no peer branch is changed.

Earlier failed CI at3ba ran11,381tests and failed six role-body-pin subcases; its complete failed log is retained privately. The failed 560-test and earlier 595-test preparation runs also remain retained. This repair uses a dated amendment, preserves the older source evidence and strict current-body comparison, and performs no full-suite or provider acceptance run. Validator results are integrity and scope evidence only.

### Decision record

`docs/decisions/2026-10-06-qmd-lexical-catalog-instructions.md` and `docs/decisions/2026-10-07-serena-jcodemunch-native-navigation-wiring.md`, with appended clarifications and the new landing follow-up, explain the behavior and limits. The preregistration README gains Amendment4 only; its RUNBOOK and earlier sealed records stay byte-identical. No prior result is recast as a new run.

### Host evidence

Repository-only change. No live instruction file, MCP registration, hook trust, client setting, gateway setting/key or model session changed. Source/render checks and synthetic fixtures remain distinct from the configuration owner's read-back and organic-use acceptance.

### Checklist

- [x] No GitHub Actions or paid service change.
- [x] No credentials, raw conversations or live client configuration committed.
- [x] Models, effort, owner's blocks and historical observations preserved.
- [x] Peer-owned worktrees and source preserved.
- [x] Native validation passed; changed checksums/registry committed last at the final head.

### Scope

Enforce the owner's 42-day model-currency rule in the existing offline validator, add daily review proposals, and fill the ruled partial inventory. This combined revision closes J826's three P2 findings, keeps J826b's simple background tasks on Haiku's own line, prepares independent model carriers and proposes MinerU's persistent local-source unit.

- Base: `3d7d4a4b2640c8583d8855670111ef5d023d3e03`; no rebase for this revision.
- Head: `de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0`.
- Lane: `lane:foundation`; draft.
- Owned paths: model catalog/schema, existing validator/freshness proposer, currency and MinerU unit templates, focused tests, independent model carriers, current guides, dated decision amendments and new evidence. Shared stack model rows, current catalog citations and registry go in the last commit.
- **Named landing path:** co-op GPT delta read → command center ACK → 5f's queue **after #810 and before #645**. Keep draft until that read and ACK; rebase once on the landing cue.

The inventory declares **21 artifact/model-consumer rows and seven package snapshots**, remains `pending`, and retains **eight unresolved groups**. Passing validation checks declared rows; it does not prove complete inventory or deployed selections.

**FILL item 7 is a prerequisite, not a completed fold.** Independent Nemotron endpoint/prefix carriers are prepared, but fixwave-defects owns the six-field memory-owner amendment to the living install plan/generated installer. It rides #810 after finding-2, per A26/A28/A27b. This lane neither recreates the absent generator nor hand-edits `install.sh`. The ai-memory example requires 2.5.2 prefix support; its stack component remains 2.4.1 under the model-only scope. This PR does not claim all folds 7/8/9 complete.

Bounded item-7 state at landed #723 (`41b65ac6bf574afa247a2542e70340a3cadf38bb`): [install-plan.json:1590-1597](https://github.com/seathatflowsinourveins/native-agent-stack/blob/41b65ac6bf574afa247a2542e70340a3cadf38bb/evidence/artifacts/new-wsl-install-plan-20261002/install-plan.json#L1590-L1597) selects ai-memory 2.5.2, but its [memory command at :1599](https://github.com/seathatflowsinourveins/native-agent-stack/blob/41b65ac6bf574afa247a2542e70340a3cadf38bb/evidence/artifacts/new-wsl-install-plan-20261002/install-plan.json#L1599), [notes at :1644](https://github.com/seathatflowsinourveins/native-agent-stack/blob/41b65ac6bf574afa247a2542e70340a3cadf38bb/evidence/artifacts/new-wsl-install-plan-20261002/install-plan.json#L1644) and [generated install.sh:465](https://github.com/seathatflowsinourveins/native-agent-stack/blob/41b65ac6bf574afa247a2542e70340a3cadf38bb/evidence/artifacts/new-wsl-install-plan-20261002/install.sh#L465) still select local MiniLM. The [stack component at :96](https://github.com/seathatflowsinourveins/native-agent-stack/blob/41b65ac6bf574afa247a2542e70340a3cadf38bb/manifests/stack.json#L96) remains 2.4.1. Fixwave's prerequisite patch owns all six settings: `embedding_provider=openai-compat`, `embedding_base_url=http://127.0.0.1:28231/v1`, `embedding_model=nvidia/Nemotron-3-Embed-8B-BF16`, `embedding_dim=4096`, `embedding_query_prefix="query: "`, and `embedding_document_prefix="passage: "`. This source review does not establish the host's effective configuration.

**MinerU's unit is source-only.** It sets `MINERU_MODEL_SOURCE=local`, supervises the shipped foreground DocLib module and carries `OnFailure=stack-alert@%n.service`. The embedded CPU guard is a **gap dated 2026-10-07**: no documented embedded ingress was found in the inspected installed source/tag. The maintained external wrapper offers a separate supported ingress and lifecycle for the CC to consider. The CC resolves the CPU precondition before activation, verifies managed mode/tier, applies the unit and performs the fresh-shell smoke. No host setting is applied here.

### CI repair at this head

The previous head `5a6842f1` failed the hosted 11,544-test suite (nine failures, one error). This revision repairs all four dependency groups: retain the complete historical 1B model/evidence record with retired-on-2604 scope and its current locator; restore the portable Claude endpoint defaults while retaining 8B/4096; disclose the post-release MCP change on three setup pages; and move the SDK disposition citation to its actual assertion line.

The setup-page changes regenerate both handbook outputs with the repository's existing builder. The original October 1 receipt stays byte-identical. A new dated [handbook projection](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/evidence/artifacts/model-currency-enforcement-20261007/handbook-projection.json) binds the current bytes; the publication test changes only its receipt locator and keeps every exact assertion. No parity, release-marker, pin-source or citation oracle is relaxed.

All 23 targeted failure/negative-control tests and 95 handbook/stack/pin tests pass (exit 0). Validation passes before and after the final shared-metadata/registry commit (exit 0, 10,404 file hashes). The [CI repair receipt](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/evidence/artifacts/model-currency-enforcement-20261007/ci826-repair.json) retains the hosted failure and local failed attempts. The new head's hosted CI and synthetic-merge execution are separate, still unverified observations. One same-branch push; no rebase, host apply or #790 change.

## SOTA sources

- CI dependency sources: `native-agent-stack@5a6842f`: `adoption/hosts/example.json`, `tools/adoption/install_claude_profile.py:350-378`, `tests/test_install_claude_profile.py:1509-1530`, `tests/test_adoption_docs_consistency.py:499-538`, `tests/test_new_wsl_handbook.py:1672-1689`, and `tests/test_upstream_surface_watch.py:2054-2060`; original 1B fields at `native-agent-stack@3d7d4a4:manifests/stack.json:2098-2109`. The new dated decision amendment records the exact source contracts and preserves historical acceptance.

- `huggingface/[email protected]` / `bd4a76030582d118e28dc9ad6c7a5911ea76176b`: [native models-info CLI](https://github.com/huggingface/huggingface_hub/blob/bd4a76030582d118e28dc9ad6c7a5911ea76176b/src/huggingface_hub/cli/models.py#L223-L237), [moving main revision](https://github.com/huggingface/huggingface_hub/blob/bd4a76030582d118e28dc9ad6c7a5911ea76176b/src/huggingface_hub/constants.py#L60), [metadata semantics](https://github.com/huggingface/huggingface_hub/blob/bd4a76030582d118e28dc9ad6c7a5911ea76176b/src/huggingface_hub/hf_api.py#L799-L819), [implicit-token early return](https://github.com/huggingface/huggingface_hub/blob/bd4a76030582d118e28dc9ad6c7a5911ea76176b/src/huggingface_hub/utils/_headers.py#L147-L151). Installed native 2.1.1 is reused. P2a keeps exact Hub origins independent of package age.
- [GitHub latest-release API](https://docs.github.com/en/rest/releases/releases#get-the-latest-release) and [PyPI JSON API](https://docs.pypi.org/api/json/#get-a-project), read 2026-10-07, supply primary metadata; changes become review requests.
- [Python 3.13 URL parsing](https://docs.python.org/3.13/library/urllib.parse.html#urllib.parse.urlsplit) documents lazy port errors and control/space stripping. The check rejects raw whitespace/C0/C1 controls before parsing and evaluates `parts.port` (P2c). [JSON Schema object semantics](https://json-schema.org/understanding-json-schema/reference/object#additionalproperties) supplies `additionalProperties: false` on complete object definitions, mirrored by validator allowed-key checks (P2b); partial conditional schemas are not incorrectly closed.
- [Filled primary provenance](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/evidence/artifacts/model-currency-enforcement-20261007/fill-source-review.json) preserves packet SHA-256 `44679fd1d26dfec36b3b57cdbde2df4290d1b068118562cb8811bf3eb7cd6941`, per-row vendor/artifact/package sources and corrections. Unknown identities remain pending. Haiku's public date is from [Anthropic's October 15, 2025 announcement](https://www.anthropic.com/news/claude-haiku-4-5); the exact ID is checked against [the current Haiku specification](https://platform.claude.com/docs/en/models/haiku-4-5/overview), read 2026-10-07. Its snapshot suffix is not its public launch date. A Haiku 5.x ID overturns this dated exception.
- `akitaonrails/[email protected]` / `7580b74d0fb9d14a6d949dc92f5ea8bb7feb3c83`: [prefix configuration](https://github.com/akitaonrails/ai-memory/blob/7580b74d0fb9d14a6d949dc92f5ea8bb7feb3c83/crates/ai-memory-cli/src/config.rs#L454-L502) and [factory wiring](https://github.com/akitaonrails/ai-memory/blob/7580b74d0fb9d14a6d949dc92f5ea8bb7feb3c83/crates/ai-memory-llm/src/factory.rs#L262-L269). Other independent carrier sources and exact pins remain in the [fill amendment](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/docs/decisions/2026-10-07-model-currency-enforcement.md#amendment-2026-10-07-ruled-partial-fill-and-current-carriers). Installer/component alignment stays owner-routed.
- `opendatalab/[email protected]` / `c221cc41bc911ad0df3eaeda97acf6a1bfe9bf93`: [documented server command](https://github.com/opendatalab/MinerU/blob/c221cc41bc911ad0df3eaeda97acf6a1bfe9bf93/README.md#L462-L484), [native foreground-module launch](https://github.com/opendatalab/MinerU/blob/c221cc41bc911ad0df3eaeda97acf6a1bfe9bf93/mineru/cli/commands/server.py#L242-L248), [module entry](https://github.com/opendatalab/MinerU/blob/c221cc41bc911ad0df3eaeda97acf6a1bfe9bf93/mineru/doclib/app.py#L443-L449), [environment override](https://github.com/opendatalab/MinerU/blob/c221cc41bc911ad0df3eaeda97acf6a1bfe9bf93/mineru/config.py#L156-L176), and [managed-parser inheritance](https://github.com/opendatalab/MinerU/blob/c221cc41bc911ad0df3eaeda97acf6a1bfe9bf93/mineru/doclib/background/parse_server_health.py#L205-L221). [Embedded kwargs](https://github.com/opendatalab/MinerU/blob/c221cc41bc911ad0df3eaeda97acf6a1bfe9bf93/mineru/model/vlm/runtime.py#L175-L180) differ from the [external wrapper's environment ingress](https://github.com/opendatalab/MinerU/blob/c221cc41bc911ad0df3eaeda97acf6a1bfe9bf93/mineru/kit/vlm_server/llama_cpp_server.py#L263-L273); installed `mineru_llama_cpp/engine.py:46-52,107-108` defaults to 99 GPU layers. This is repository systemd integration, not an upstream systemd recipe.
- `systemd/[email protected]` / `b3d8fc43e9cb531d958c17ef2cd93b374bc14e8a`: [currency command-failure prefix](https://github.com/systemd/systemd/blob/b3d8fc43e9cb531d958c17ef2cd93b374bc14e8a/man/systemd.service.xml#L1443). MinerU follows [systemd@v260 service semantics](https://github.com/systemd/systemd/blob/v260/man/systemd.service.xml#L158), [failure/start limits](https://github.com/systemd/systemd/blob/v260/man/systemd.unit.xml) and [control-group stop semantics](https://github.com/systemd/systemd/blob/v260/man/systemd.kill.xml#L56), checked against the installed 259 manual. Alerting covers DocLib/unit failure, not a parser failure that leaves DocLib alive.
- `native-agent-stack@3d7d4a4`: `scripts/freshness_propose.py:861,942`, `scripts/validate.py:144,484`, `adoption/templates/systemd/stack-currency.service:16-26`, `docs/acceptance-evidence-policy.md:24-38`, `docs/lanes.md:94-115`. The owner-defined 42/7-day policy and package join are the deterministic gap. No upstream is rebuilt and no validator executable is added.

### Evidence-class table

| Claim | Evidence class | Command / receipt |
| --- | --- | --- |
| UTC clock, 42/43-day and 7/8-day boundaries, package join, J826 P2 positive/negative controls | `synthetic`, `local_integration` | 113 combined policy/proposal/existing-validator tests, exit 0; [new J826 checks](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/evidence/artifacts/model-currency-enforcement-20261007/j826-checks.json). |
| Primary filled dates/revisions, retained exceptions and unresolved roles | `source_review` | `fill-source-review.json` records the earlier 20-row partial fill; `j826-checks.json` adds the source-reviewed Haiku ruling and current 21-row state. Seven packages and eight unresolved groups remain; no inference or live-selection claim. |
| Legacy currency proposer/timer compatibility | `local_integration` | Earlier 91 checks, exit 0, in `checks.json`. |
| Handbook/stack/pin carriers and SDK controls | `synthetic`, `local_integration` | Earlier 95 handbook/stack/pin checks and 27 SDK tests, exit 0, in `fill-checks.json`; the recorded 516-test carrier check also exited 0. |
| MinerU source/failure/lifecycle template | `synthetic`, `local_integration` | Eight focused tests and unit syntax verification, exit 0, in `fill-checks.json`; no host application. |
| Repaired architecture, portable parity, release disclosures and citation controls | `synthetic`, `local_integration` | 23 targeted tests plus 95 handbook/stack/pin tests, exit 0; `ci826-repair.json` and dated `handbook-projection.json`. |
| Publication consistency after the registry-last commit | `structural_validation` | `exit 0; 69 components, four profiles, 223 receipts, 10,404 file hashes; structural integrity/scope only`. |

### Local commands run

Checks use owned durable scratch and `nice -n 19 ionice -c3`.

```text
python3 -B -m unittest tests.test_model_currency tests.test_model_currency_propose tests.test_validate
exit 0: 113 tests after J826 fixes.
python3 -B -m unittest tests.test_new_wsl_handbook tests.test_stack_lifecycle tests.test_foundation_stack_pins
exit 0: earlier 95 tests.
uv run --no-project --with claude-agent-sdk==0.2.162 python3 -B -m unittest discover -s examples/claude-runtime-sdk/tests
exit 0: 27 tests.
uv run --no-project --with claude-agent-sdk==0.2.162 python3 -B examples/claude-runtime-sdk/tests/check_controls.py --disarm-route
exit 1: deliberate negative; unchanged normal control exit 0.
python3 -B -m unittest tests.test_mineru_user_unit
exit 0: 8 tests.
systemd-analyze --user verify adoption/templates/systemd/mineru.service
exit 0: syntax only; no unit loaded or started.
nice -n 19 ionice -c3 python3 -B scripts/validate.py
exit 0; 69 components, four profiles, 223 receipts, 10,404 file hashes; structural integrity/scope only
```

The **two-day advance refresh is included**, beginning on landscape-check day five. The collector appends private review JSON/Markdown rather than publishing a GitHub PR, renewing dates or switching models. Hub SHA differences are revision candidates, not proof of new weights. Unsupported vendor-page adapters request source review. The initial pending/empty offline dry run returned `complete_inventory`, zero source checks and no writes; it remains a dated scaffold observation.

Retained failed attempts remain in the original receipts: the initial legacy check's old owned-file hash failure, the fixture's missing overturn field and the scratch-classification correction. Historical observations and decided text are preserved; new checks and dated amendments extend them.

### Decision record

[Dated decision and amendments](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/docs/decisions/2026-10-07-model-currency-enforcement.md) records alternatives, sources, overturn triggers, partial fill and J826/J826b. [Current guide](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/docs/model-currency.md) carries the pending item-7 prerequisite. [MinerU recipe](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/recipes/mineru-local-service.md) carries CC activation and the dated embedded-guard gap.

Receipts: [initial checks](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/evidence/artifacts/model-currency-enforcement-20261007/checks.json), [fill checks](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/evidence/artifacts/model-currency-enforcement-20261007/fill-checks.json), and [new J826 checks](https://github.com/seathatflowsinourveins/native-agent-stack/blob/de7a7f2b6b6d7eac4241701b5c06a63b3265cbe0/evidence/artifacts/model-currency-enforcement-20261007/j826-checks.json). Raw logs stay private.

### Host evidence

No new host receipt/status is promoted. No weights, inference, package bump, live model switch, timer/service installation or client-configuration change was run for this revision. CC MinerU application and fresh-shell acceptance remain pending; A23's one-page parse remains a separate dated observation. Complete inventory, unsupported adapters, native timer execution and whole-unit timeout recovery remain unqualified. Item 7's owner-routed prerequisite is not counted as a completed fold.

### Checklist

- [x] Draft, exactly `lane:foundation`, named read/ACK/queue path.
- [x] No new validator executable, rebuilt upstream, workflow or paid surface.
- [x] No credentials inspected, logged or committed; Hub implicit auth disabled.
- [x] Peer-owned paths/heads and queued branches preserved.
- [x] Historical results/decided text preserved; dated amendments and new receipts used.
- [x] Targeted controls pass; partial inventory and pending owner/CC apply gates explicit.
- [x] Final stack/registry commit is last; validation passed before and after it (exit 0).

### Scope

Restore the handbook test's live publication binding so a later profile or handbook regeneration updates its own maintained receipt, instead of editing #826's dated landing record.

- Base commit: `6d252c9c102e575bc9229bf6bb2149409655d5f3`; head: `4d2ce2a7719adca918025ffde295ef1dfa30bf02`.
- Lane: `lane:foundation`; draft.
- Exactly four paths: `tests/test_new_wsl_handbook.py` (one receipt-path line), `evidence/artifacts/new-wsl-handbook-20261001/receipt.json` (current computed binding plus one appended regeneration), its one-line `README.md`, and registry last.
- The generator, profile, both generated outputs, hash/inventory assertions, existing receipt observations/history and #826's dated record stay byte-identical.
- **Named landing path:** co-op cross-family exact-head read, hosted validate, command center CI read and cue; **right after #820, ahead of #775**. ONE replay at that cue if #820 changes main; full test phase in that landing turn. Hold this draft head for the reads.

## SOTA sources

- `native-agent-stack@6d252c9:tests/test_new_wsl_handbook.py:1672-1691`: the publication contract checks actual current generator/profile/output hashes and inventory, with byte-change negative controls. Its comment says hashes follow regeneration. Only its receipt locator changes.
- Same pin, `evidence/artifacts/new-wsl-handbook-20261001/receipt.json:268,656,700`: the receipt is a current hash mirror and prior entries expressly refresh mutable producer/output bindings while preserving observations. This existing repository practice fills the publication-binding gap; no new manifest, generator or validator is introduced.
- Same pin, `docs/acceptance-evidence-policy.md:59-65` and `docs/landscape-domain-notes.md:33,38`: retain historical inputs/results/failures/pins. All prior receipt fields, regeneration prefix and `previous_outputs` are retained; #826's dated record remains historical.
- Same pin, `docs/lanes.md:94-115`: main-copy/own-registration protocol; `scripts/host_receipts.py:710` updates the three own hashes and inserts the README, in the registry-only final commit.

### Evidence-class table

| Claim | Evidence class | Command / receipt |
| --- | --- | --- |
| Existing strict publication contract passes at the maintained binding | `local_integration`, `synthetic` | 87 handbook tests, exit 0; existing byte-change negative controls unchanged. |
| Actual generated bytes are current | `local_integration` | Native builder `--check`, exit 0; MD a1a0cb17… and JSON a42c8915… as recorded in the appended regeneration. |
| Dated records/history/other test assertions preserved | `source_review`, `local_integration` | Exact base-file/JSON comparison, exit 0; independent bounded source critic ACK. |
| Publication integrity after registry-last commit | `local_integration` | `validate.py` before/after, exit 0; 69 components, four profiles, 224 receipts, 10,508 hashes. |

### Local commands run

All checks use the owned external TMPDIR, `nice -n 19 ionice -c3` and closed stdin.

```text
python3 -B scripts/build_new_wsl_handbook.py --check
exit 0, status passed; current outputs unchanged.
python3 -B -m unittest tests.test_new_wsl_handbook
exit 0: Ran 87 tests in 37.368s; OK.
Exact unchanged-field, regeneration-prefix, dated-record and one-test-line comparison
exit 0; all preservation controls true.
python3 -B scripts/validate.py
exit 0 before and after final registry commit; 10508 file hashes.
git diff --check
exit 0.
```

The scoped cached open-PR check found 44 open PRs and these overlapping neighbours: #645, #754, #769, #770, #810 on the maintained receipt; #776 and #810 on the test. The CC assigned this narrow critical-path repair before later regeneration PRs. No peer head or file is edited by this lane.

### Decision record

The CC's J-HANDBOOK-BINDING ruling supplies the bounded disposition. The one-line receipt README identifies the maintained current-state carrier. No old decision or dated observation is rewritten, and no extra decision file is added to this small unit.

### Host evidence

No host/client/installation or acceptance-status changes. These checks establish the repository publication contract, not upstream model or native host acceptance.

### Landing read fields

The intentional main-test edit is `tests/test_new_wsl_handbook.py:1677`, disposed of in advance by the CC for this exact receipt rebind. Name it in `main-tests=` at the landing read. Declare every actual post-read/replay change in `adapted=`; the full-suite phase is deferred to the landing turn. Nothing is re-pointed to a new dated path.

### Checklist

- [x] Existing current-state receipt reused; earlier observations and dated record preserved.
- [x] Only one test line changes; assertions, producer and profile unchanged.
- [x] Own entries registered last; required local checks pass.
- [x] No workflow, dependency, paid surface or credential change.
- [x] Draft and one foundation label; named read/ACK/queue path.

### Scope

Provision the NativeStack2604 Lanes dashboard and retain the native dimensions needed to distinguish tool, hook, skill, service and token activity. Monitoring steps 6–8 include the collector route, supported file provisioning and matching install-plan acceptance. A13 makes main's rendered Prometheus unit the sole startup carrier; the old drop-in is a dated, inert, do-not-apply record. Activation and start-timestamp/new-turn qualification remain the command center's later host step.

- Landing base commit: `475127d43c1cce70dba5cd31238af4e078fa17eb` (the command center's relayed #645 squash merge).
- Lane: `lane:foundation`.
- Owned paths: observability collector/dashboard/readers, focused checks, generated NativeStack2604 Grafana assets, monitoring install-plan mirrors and dated decisions.
- Shared install-plan changes preserve landed #723/A27 qualification, custody and the authoritative rendered Prometheus unit. The repair was replayed once onto #645's relayed squash merge. The Grafana notes retain main's exact W1b selection/qualification statement and re-apply the reviewed dashboard/provisioning note. Main's registry is restored and owned rows are regenerated last; no shared registry lines are hand-merged.

The Lanes UID is `cc-lanes`, provisioned under the existing Token efficiency provider. Withdrawal is file based: restore the prior `lanes.json`, or remove only it, temporarily allow provider deletion, restart in a permitted slot, verify the anonymous dashboard endpoint returns 404, and restore `disableDeletion: true`. Keep token-layer, the provider and private registry.

Every provisioned dashboard using `codex_turn_token_usage_sum` carries lower-bound titles and descriptions until deployed start timestamps and a newly born single-turn reconciliation pass. The standalone template-copy publisher and maintained renderer share that policy. Latest unknown status values retain nulls; known RTK zero share requires an observed classified-shell denominator.

One clock panel retains the producer's 50 ms error-bound warning, 100 ms absolute-offset critical threshold and 1,200 s reference-age warning. Its separate three-minute UI freshness preserves missing data as No data. Collector serialization and native configuration validation pass; live clock-panel acceptance remains pending.

## SOTA sources

- [Codex rust-v0.160.1 / immutable source](https://github.com/openai/codex/tree/d27764b82f7118f674371e6d6e76271d9d606edb/codex-rs/otel): `events/session_telemetry.rs` and config schema for native named tool events. Native `item_completed` and fork-history metadata supply the bounded readers.
- [OpenTelemetry Collector Contrib v0.162.0](https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/v0.162.0): transformprocessor, signaltometricsconnector, spanmetricsconnector and otlpjsonfilereceiver for bounded dimensions, sanitization and supported routes.
- [Grafana v13.2.3 file provisioning](https://github.com/grafana/grafana/blob/v13.2.3/docs/sources/administration/provisioning/index.md): provider deletion policy and JSON dashboard format. [Loki v3.7.8 metric queries](https://github.com/grafana/loki/blob/v3.7.8/docs/sources/query/metric_queries.md): range aggregation and observed-denominator zero filling.
- [Prometheus v3.15.0](https://github.com/prometheus/prometheus/tree/v3.15.0): `created-timestamp-zero-ingestion` feature flag; deployed single-turn reconciliation remains required.
- [OmniRoute v3.8.51](https://github.com/diegosouzapw/OmniRoute/tree/v3.8.51): `open-sse/services/routing/otel.ts` optional upstream GenAI OTLP sink. Its environment application and native identity qualification remain with the command center.

### Evidence-class table

| Claim | Evidence class | Evidence |
| --- | --- | --- |
| Named nested context-mode and RTK shell results reach Loki | native_proven | Retained one-shot per-run Codex OTel probe, 2026-10-06; no repeated model probe |
| Native BEFORE readers exclude inherited history | local_integration | Bounded 90-minute/246-minute receipts; method differences remain recorded |
| Fork/window/dedup, null-preserving status and provisioning behavior | synthetic / local_integration | Focused fixtures and 12 dashboard tests; not unchanged upstream acceptance |
| Both Collector configurations are valid | native_proven | Installed Collector validation, exit 0; configuration validation is not host application |
| Dashboard routes and file-based withdrawal follow supported formats | source_review / local_integration | Pinned provisioning sources, actual publisher coverage and passing install-plan checker; no deployed browser acceptance |

### Local commands run

```text
nice -n 19 python3 -m unittest tests.test_ns2604_dashboards
exit 0; 12 tests pass, including every provisioned Codex-token dashboard and standalone portability

nice -n 19 python3 evidence/artifacts/new-wsl-install-plan-20261002/check_plan.py
exit 0; 84 rows, 186 commands and 113 acceptance entries agree

nice -n 19 otelcol-contrib validate --config=evidence/artifacts/new-wsl-install-plan-20261002/config/otel.yaml
nice -n 19 otelcol-contrib validate --config=observability/collector/collector.yaml
both exit 0

nice -n 19 python3 scripts/validate.py
exit 0; 69 components, 10,379 hashed files, 4 profiles, 214 receipts

git diff --check
exit 0
```

The initial plan-check failure from import-generated configuration bytecode is retained in the private check receipt. The loader now suppresses bytecode during dynamic imports, restores the prior setting and passes the rerun. Generated dashboard JSON is source evidence; it is not visual acceptance.

### Decision record

- `docs/decisions/2026-10-06-native-lane-invocation-observability.md`.
- `docs/decisions/2026-10-06-ns2604-native-dashboard-countability.md`.

The README classifies all six retained 13000 references without rewriting frozen observations and requires a compatible emitter checkout while its timer is enabled. Storage COUNT/AGE read-back, unit/GPU export, client limit headroom and the GitHub snapshot feed retain named owners and explicit remaining gates.

### Host evidence

No host receipt or client configuration is applied by this PR. Host apply waits for the GPT delta read, command-center ACK and the permitted post-Claude-window slot. Native Loki/Prometheus read-backs and an anonymous browser capture remain required.

Organic BEFORE/AFTER counts are not yet measured under the all-prompts, first-turn and actual steer-visibility rules. Effective role grants and referenced co-op blocks remain coverage gaps. No exclusion, readiness or token-row closure is claimed. No local A/B or trial gates today's read-back.

### Earlier rebase

Commit 1 (`f19626d6` → `35bfa72f`) preserves main's Grafana
`--show-error --output "$GRAFANA_HEALTH_FILE"` flags and uses the same flags
in the NativeStack2604 port annotation. Commit 4 (`ceaca5ee` → `a752852c`)
changed only the surrounding anti-pattern-log context: both zero-context stable
patch IDs are `947dc92f4ad5ded7b6258d65eb1b290de6c294f2`, so its added/deleted
content is unchanged.

### Checklist

- [x] GitHub Actions changes: not applicable.
- [x] No secrets printed, logged or committed; no new required secret.
- [x] No new paid hosting, subscription or billing surface.
- [x] Peer-owned worktrees and unrelated files preserved.
- [x] Registry commit is last; PR remains draft for cross-family review.



## Landing review follow-up

The local follow-up preserves landed metric privacy and records the configured source/query for every invoke column. Validated native names remain on Loki; bounded native metric keys remain permitted where the provider supplies them, and hook identity is qualified as lifecycle rather than repository identity. It restores main's run-correlation test byte-for-byte and removes run correlation from every exported metric route, while retaining log correlation. The clock serialization note moves verbatim into a dated appended amendment, and renderer source references use named exporter sections. F6/F7 remove the unnecessary agentsview version literal from the health comment. F8 preserves render-only Grafana checking and requests installed-unit byte verification explicitly in the three acceptance calls and their plan mirrors. The next exact-head read covers all eight findings. No host activation or client change is included.

## Landing validation and path

The authorized landing replay is on475127d4 (#645). It preserves main's complete Grafana W1b notes and re-applies the reviewed dashboard note. All unowned main registry entries remain byte-identical, and all53 owned non-registry files have current registry hashes. Replay checks pass:223 affected tests (7 skips),721 tests in the eleven PyYAML-gated modules (47 skips), and six focused merger controls (no skips). Main's unchanged sources from475127d4 pass150 tests (7 skips), including the unchanged host-merger, tool-name and run-correlation modules. The install-plan and generated-dashboard checks pass; scripts/validate.py exits0. Native Node6/6 is reused from the completed phase because its inputs did not change.

The earlier complete Python phase on base003804f2 ran11,561 tests in the private, activated Python3.12 environment with checksum-locked CI dependencies and an initially empty HOME. It returned12 failures,1 setup error and1,211 skips. Each of the13 failing method/class selectors reproduces on clean main003804f2 in the same environment; no test was edited. These are declared baseline failures under the co-op's instructions, not a claim that the full phase passed. The setup-error selector is the runnable LinuxPlatformDependencyTests class. CI requirements SHA256:0b37433fb0fb165c893737e8e887581a07a6469683fbdf67ada1a08288758605; original pip-freeze SHA256:efd7c60ca69afe49918441138c3f3461b9c6e513628f562d5503362f8225c105. C1 exposed that this environment lacked the workflow's second pinned requirements file, so its YAML-gated tests had skipped. The replay adds unchanged requirements-validation.txt (SHA256:458d8cb1fef26d0d0a9a6a76707c0bad04fe84558550db750d50af206fecba81) and runs all eleven gated modules, as the command center directed instead of a second full phase. The new freeze SHA256 is e7d19cac4e91ceebe0d41b55581eb7a6dd8e7ebc021ce9a8b03dfe16056789d0. Original baseline logs and runnable IDs remain unchanged in durable lane state.

Landing path: the co-op's content read of27c8a4de closes F1–F8; the next head carries C1/V1–V4 and only the authorized #645 replay delta. The command center ACKs that head;5f alone lands it with green hosted CI. The relayed queue position is after#645;#825 remains dependent on LANDED775. The public hosted validate result remains the landing gate. Shared install-plan neighbour#723 is already landed and preserved.

## Contract changes

- `tests.test_observability_writer_identity.NativeCollectorTests`: kind5 runtime binding/eligibility adaptation, accepted by name under CC item171356Z. Maintained inputs are `manifests/stack.json:1102` (Collector pin) and `evidence/artifacts/new-wsl-install-plan-20261002/install-plan.json:2239` (native executable destination). The dated7October existing-native-writer-contracts amendment records the choice; it does not supply either maintained input.
- `NativeCollectorTests.setUp` and `.post`: kind2a synthetic fixture extensions for the new isolated guard/scope-attribute test; existing methods retain the prior pipeline and default payload.
- `NativeCollectorTests.test_sessions_and_processes_are_separate_writers_and_collapsed_streams_add_up`: kind1 assertion inventory, retained by name under CC item172216Z. All five prior main assertions remain AST-identical (Claude60/14, Codex2000/4000, phase4/4, no conversion errors, incoming session-group telemetry); exactly-two-point/no-agent-label checks add constraints. Main had no three-point assertion.

The npm setup-class failure is environment-dependent: this lane resolves npm to a mise shim invalid under empty HOME, while the co-op launcher places real node/npm directories first on PATH and all28 tests pass there. The lane's exact main-run failure remains in baseline-final-summary-failures.log and its class selector remains in the declared baseline file.

## C1 and V1–V4 closures

- C1: the maintained host merger explicitly copies the reviewed export guard and permits its one insertion immediately before conversion. Other host settings/order and refusal checks remain. Main's host module is byte-identical and passes; six new controls cover acceptance, idempotence, unknown processors, misplaced/duplicate guards, missing definitions and conflicting host settings.
- V1: the four existing-member declarations above are recorded in the dated native-writer-contracts and disposition amendments. The command center accepts the maintained runtime binding as kind5 and the session assertion inventory as kind1 by name.
- V2: the environment-dependent npm setup-class failure stays declared with its same main-run log; no test contract is weakened.
- V3: the disk-headroom decision gains only an appended dated amendment naming processors.batch.timeout; every earlier byte and its observed one-second value remain unchanged.
- V4: the current NativeStack2604 README explicitly requires the21300 manual Loki push URL.

The replay's extra adaptations are the dated M1/disposition record, preserved645 Grafana notes, the C1 merger guard/order support and new controls, the appended historical documentation locator and manual Loki endpoint instructions. The original fifteen disclosed adaptations remain. No host activation, client configuration or new feature selection is included.