Clarify sandbox evidence records and current README references - #879

Scope

Current sandbox records still described a Claude-only echo after the separate Codex observation was bound, left an event digest derivation unstated, lost spaces in current notes and duplicated an older README reference in the living profile. This records-only change fixes those four items and regenerates the matching handbook through its existing builder.

• Landing base: a484989a43f70ff2575b6fb054cf00c9834e7679; original recorded source base0d5672b0 retains its dated observations. Lane: lane:foundation.
• B: describe the two separately retained0.0.79 echo observations, cite the Codex receipt in use-stage evidence and narrow the next action to0.0.79 policy qualification.
• C: document unchanged event SHA256 as the complete41-byteUTF8 identifier without JSON quoting, normalization, newline or domain label; distinguish the existing domain-labelled producer identity.
• D: repair descriptive spaces.
• E: replace the duplicated0.0.78 README reference with one immutabled9aac209 README and regenerate current handbook bindings.
• The optional Claude session identity stays unknown because retained compact evidence supplies none.
• Landing path:5f after exact-head checks/reviews and fresh current-main merge/validate under the routine records cue. No test file is modified; native output/frozen earlier receipts and policy proof remain unchanged.

SOTA sources

• anthropics/sandbox-runtime, immutable0.0.79 commit d9aac2098351ca17f3743fbaf6ecbd0051b7e00e: the current install/smoke/settings source.
• Python3.12 hashlib: explicit byte-input SHA256 contract, independently reproduced from the existing compact donor receipt. Complete identifier bytes remain private; existing digest2f74… is unchanged.
• Existing native CodexCLI0.161 producer/event evidence and unchanged canonical producer artifactaa835… supply the recorded observation. No current-client inference or new operation is added.
• Existing native scripts/build_new_wsl_handbook.py, SHA2561a63ce9f991ec29f7a7e00564940a178b329c47e7661c77a09a60a4c54670f99, projects the canonical profile refs into the handbook.

Evidence and validation

The existing builder's --write and --check return0 with matching output hashes. The existing current-output/maintained-receipt test passes1case. The actual independent critic is retained verbatim in the actual_output JSON field of evidence/artifacts/row70-records-b-e-20261008/independent-critic.json; decoding it reproduces all9171 originalUTF8 bytes/SHA16fe799f6a9075b9856fae3eb584c0ed4deb667233bf5e288bb47997392489e3, including its final blank line. This standard encoding avoids an EOF whitespace defect in the publication without removing any actual report bytes. The JSON artifact is9811bytes/SHAbdf53e7609e865baa9388ef8ce863ff3a65c937c552bd2529e69a9b59ef5d384 and is hash-bound by the unit receipt. It verifies all four record changes, the byte-input digest, distinct identities and preserved evidence.

The maintained handbook receipt updates current profile/output bindings, preserving all40prior regeneration objects and8prior-output objects and appending one of each. Source/generator/test output is retained with its exact scope; it is local record/generated-byte verification, not native acceptance or policy qualification. Registry is updated last.

Preserved scope and inverse

Original Claude receipt28aa…, producer artifactaa835…, hello/version output hashes and the original command/time/source/proof fields remain unchanged. The0.0.77 filesystem/network and recovery limitations retain their historical scope;0.0.79 policy qualification remains owed. This PR contains no #876 living-plan edit, catalogue, workflow, credential, host, runtime, provider, broker, model or policy action.

Revert only these record/projection edits and their new evidence/registry bindings to undo publication. The previous maintained handbook binding remains in its history. No host inverse is required.

Checklist

• Four record items are separate from the already landed defectA install-path fix.
• Builder write/check, current binding test and retained independent critic pass.
• Original observations/digests and historical acceptance limits preserved.
• Current handbook binding history retained; unknown Claude identity remains unknown.
• Updated packaging validator passes. Fresh current-main preparation native validate0 (70components,10887files,4profiles,238receipts), exact treefecb4644 matches the final source tree; no modified tests or regeneration needed and all42recorded handbook input hashes match. Earlier validation stays separately dated.
• Exact-head hosted/thread/current-main conditions before5f lands.