Launch Trade sessions in native client worktrees - #935

…reads

CC P2-1: ordinary unapproved inventory discoveries are names-only records,
with no target stat/resolve/open/hash or fabricated asset presence. Cache
signatures track names, while canonical content reads retain exact approval.
Known aliases bind an independently approved canonical target. Optional
Architecture failures retain the last page or explicit UNREPORTED placeholder
and allow the other six pages to refresh.

CC P2-2: Adoption attribution metadata uses the maintained protected-name,
bounded no-follow descriptor reader and guarded directory enumeration. Raw
co-op registry/parking/capacity payloads are never read during derivation;
unsafe/missing metadata remains UNREPORTED with no fabricated attribution.

P3: add reproducible names-only user grant/alias observations and a CI
repo-grant parity test against git ls-files, replace vacuous selector test,
fix root-dependent mapping provenance and documentation spacing/semantics.
Host-label masking remains the CC's separate repository-wide decision.

Preserve both GPT P2 corrections: frozen receipt eligibility exclusion and
exact source/evidence/inventory readers. Meaningful red/green regressions
cover unlisted stat/open traps, composer degradation, alias retargeting,
Adoption parent/leaf redirects, source limits and measured counters.

ONE authorized commit on 6480927, no rebase.
Landing-head grants and full host build/privacy receipt are owed only after
the authorized rebase, following #926, #935 and #915. CC owns Claude reads.
Source CC read SHA256 dfd30c957ffc8c87fd2283b87dfa4ca097917492ccce69e00e79216609e37c6c.
Native reference: CPython3.13.16 cbc944f4bc59639a444dd971c737788ba2283a91,
existing source_policy descriptor reader and native Git filename metadata.

…reads

CC P2-1: ordinary unapproved inventory discoveries are names-only records,
with no target stat/resolve/open/hash or fabricated asset presence. Cache
signatures track names, while canonical content reads retain exact approval.
Known aliases bind an independently approved canonical target. Optional
Architecture failures retain the last page or explicit UNREPORTED placeholder
and allow the other six pages to refresh.

CC P2-2: Adoption attribution metadata uses the maintained protected-name,
bounded no-follow descriptor reader and guarded directory enumeration. Raw
co-op registry/parking/capacity payloads are never read during derivation;
unsafe/missing metadata remains UNREPORTED with no fabricated attribution.

P3: add reproducible names-only user grant/alias observations and a CI
repo-grant parity test against git ls-files, replace vacuous selector test,
fix root-dependent mapping provenance and documentation spacing/semantics.
Host-label masking remains the CC's separate repository-wide decision.

Preserve both GPT P2 corrections: frozen receipt eligibility exclusion and
exact source/evidence/inventory readers. Meaningful red/green regressions
cover unlisted stat/open traps, composer degradation, alias retargeting,
Adoption parent/leaf redirects, source limits and measured counters.

ONE authorized commit on 6480927, no rebase.
Landing-head grants and full host build/privacy receipt are owed only after
the authorized rebase, following #926, #935 and #915. CC owns Claude reads.
Source CC read SHA256 dfd30c957ffc8c87fd2283b87dfa4ca097917492ccce69e00e79216609e37c6c.
Native reference: CPython3.13.16 cbc944f4bc59639a444dd971c737788ba2283a91,
existing source_policy descriptor reader and native Git filename metadata.

…reads

CC P2-1: ordinary unapproved inventory discoveries are names-only records,
with no target stat/resolve/open/hash or fabricated asset presence. Cache
signatures track names, while canonical content reads retain exact approval.
Known aliases bind an independently approved canonical target. Optional
Architecture failures retain the last page or explicit UNREPORTED placeholder
and allow the other six pages to refresh.

CC P2-2: Adoption attribution metadata uses the maintained protected-name,
bounded no-follow descriptor reader and guarded directory enumeration. Raw
co-op registry/parking/capacity payloads are never read during derivation;
unsafe/missing metadata remains UNREPORTED with no fabricated attribution.

P3: add reproducible names-only user grant/alias observations and a CI
repo-grant parity test against git ls-files, replace vacuous selector test,
fix root-dependent mapping provenance and documentation spacing/semantics.
Host-label masking remains the CC's separate repository-wide decision.

Preserve both GPT P2 corrections: frozen receipt eligibility exclusion and
exact source/evidence/inventory readers. Meaningful red/green regressions
cover unlisted stat/open traps, composer degradation, alias retargeting,
Adoption parent/leaf redirects, source limits and measured counters.

ONE authorized commit on 6480927, no rebase.
Landing-head grants and full host build/privacy receipt are owed only after
the authorized rebase, following #926, #935 and #915. CC owns Claude reads.
Source CC read SHA256 dfd30c957ffc8c87fd2283b87dfa4ca097917492ccce69e00e79216609e37c6c.
Native reference: CPython3.13.16 cbc944f4bc59639a444dd971c737788ba2283a91,
existing source_policy descriptor reader and native Git filename metadata.

…deferred detail (#913)

* Render source-built architecture and per-role adoption evidence

* fix(local-pages): restore receipt evidence and defer architecture tables

* fix(local-pages): confine architecture reads and declare inventory custody

* fix(local-pages): guard Architecture inventory and exclude frozen receipts

P2-1: remove two unused frozen input grants. Derive the eligible receipt
union from pinned registration metadata and the tripwire's own eligibility
declaration, excluding frozen/protected paths; 4650 becomes 4648. No artifact
body use, descriptive-pin waiver or runtime-discovered permission.

P2-2: pass the independent reader through the complete inventory build and
cache signature. Authorize exact canonical content inputs before opening or
hashing; protect both lexical and canonical aliases; parse/hash the same
captured bytes. Newly discovered unlisted sources stop publication/cache
reuse without changing the previous published page or receipt.

User agent and service configurations use separate exact metadata grants
and native descriptor-relative no-follow stat, never content hashes. Only
exact installed SKILL.md assets receive user content approval. Bounded
64KiB capture avoids allocating a logical large bound for a small payload.

Full-builder regressions reproduce both reported forbidden reads at ddb,
then verify zero forbidden opens and prior publication preservation; cached
discovery, aliases, unlisted metadata, late symlinks, growth budgets and
unknown hash comparisons are covered. Prior immutable Adoption/source and
evidence boundaries remain intact. No rebase; ONE authorized fix commit.

Reference GPT verdict SHA256
9c4ed3c41e4e678981b75a71a398df373d0c6798a3d6b5ddb5403f85a1f94e59;
native reader ddb7a2a and CPython3.13.16
cbc944f4bc59639a444dd971c737788ba2283a91 os/pathlib/io with native Git metadata.

* fix(local-pages): preserve page availability and guard Adoption role reads

CC P2-1: ordinary unapproved inventory discoveries are names-only records,
with no target stat/resolve/open/hash or fabricated asset presence. Cache
signatures track names, while canonical content reads retain exact approval.
Known aliases bind an independently approved canonical target. Optional
Architecture failures retain the last page or explicit UNREPORTED placeholder
and allow the other six pages to refresh.

CC P2-2: Adoption attribution metadata uses the maintained protected-name,
bounded no-follow descriptor reader and guarded directory enumeration. Raw
co-op registry/parking/capacity payloads are never read during derivation;
unsafe/missing metadata remains UNREPORTED with no fabricated attribution.

P3: add reproducible names-only user grant/alias observations and a CI
repo-grant parity test against git ls-files, replace vacuous selector test,
fix root-dependent mapping provenance and documentation spacing/semantics.
Host-label masking remains the CC's separate repository-wide decision.

Preserve both GPT P2 corrections: frozen receipt eligibility exclusion and
exact source/evidence/inventory readers. Meaningful red/green regressions
cover unlisted stat/open traps, composer degradation, alias retargeting,
Adoption parent/leaf redirects, source limits and measured counters.

ONE authorized commit on 6480927, no rebase.
Landing-head grants and full host build/privacy receipt are owed only after
the authorized rebase, following #926, #935 and #915. CC owns Claude reads.
Source CC read SHA256 dfd30c957ffc8c87fd2283b87dfa4ca097917492ccce69e00e79216609e37c6c.
Native reference: CPython3.13.16 cbc944f4bc59639a444dd971c737788ba2283a91,
existing source_policy descriptor reader and native Git filename metadata.

* fix(local-pages): align architecture grants and protect public inventory

* fix(local-pages): refresh Architecture landing provenance

* fix(local-pages): publish unapproved inventory as counts

---------

Co-authored-by: seathatflowsinourveins <[email protected]>