Description
Canonical publication introduced refused identifier classes into public history. Source rewording, a public-consumer publisher guard and exact history-only allowances are required without widening working-tree exemptions.
Acceptance Criteria
- #1 Canonical source is reworded and public-consumer guard rejects planted refused terms before any push
- #2 Canonical protocol is republished and exact history-only allowances retain negative working-tree controls
- #3 Integrated local gate and hosted validation pass with completing SHA and run ID
Definition of Done
- #1 just check passes locally
- #2 hosted Validate workflow passes on the completing commit
Implementation Plan
Source reword and fail-closed public-consumer guard; root republication; independently reviewed exact history-only scan allowances; integrated local gate and exact main hosted Validate before finalization.
Implementation Notes
Loop23 source guard landed at 2e668bdcf256bf15d382b8c5e914d1e9dc55ad06, local gate passed with 86 tests and public guard, completed code review had zero unresolved findings. Expected STALE-only drift run 37040932935 had current=7 stale=44 missing=0 unreadable=0. Root publication completed for 44 consumers and remote readbacks contain all pushed commits; this checkout received cc9d3f318b6d55d3c77d7b3bc19967e9814182ec. Exact history-only scan candidate and independent review remain before green main.
Loop23 counts: L1 implementation 1/2, L2 implementation 1/2, L2 evidence-only review-repair 1/2, infrastructure retries 0, no ceiling grants. Initial R2 rejected a wrong-document control; corrected same-document historical control failed for the required source-identifier class and R2-2 accepted unchanged code.
Final Summary
Completed source rewording and fail-closed publisher guard, root republication to 44 consumers with remote commit readbacks, and exact path/line/full-content history-only allowances without widening working-tree checks. Completing GCV SHA b799100cf9ad691a08a18c259ad732029d191f86 passed the full local gate (Validation passed) and hosted Validate 37047155497, both Validate reference and ci-success successful. Source guard commit 2e668bdcf256bf15d382b8c5e914d1e9dc55ad06 passed 86 tests and CodeRabbit, expected STALE-only drift 37040932935; publication delivered cc9d3f318b6d55d3c77d7b3bc19967e9814182ec. Independent R2 accepted exact scanner candidate after the fourth control was corrected within the same document.