Save reboot checkpoint with source layout WIP and native evidence

2026-09-11 06:42:46 -07:00
parent c4bad4b8de
commit ca53f574e5
82 changed files with 6211 additions and 168 deletions
@@ -5,27 +5,33 @@ Updated 2026-09-11, Codex-9e8r6t `/root`.
 [TASK_LEDGER.md](TASK_LEDGER.md) separates evidence from assumptions;
 [STATE.md](STATE.md) owns active leases and results.

+Paused for the user's reboot. [RESTART_HANDOFF.md](RESTART_HANDOFF.md) takes
+precedence for immediate resume: validate WSL/Ubuntu, frozen input provenance,
+then a fresh focused3 gate. The corrected layout build was interrupted before
+tests; no new GUI exists. Lifeline/Chain exact history passed on GUI52DE82;
+Machine Create/Undo passed, with Redo/reopen still pending.
+
 ## Immediate implementation and acceptance

-1. Preserve the verified creation integration and matching GUI stage, committed
-   as 4bb4aaf and transferred with independent anonymous readback/hash verification. Final immutable
-   desktop653/653 passed after creation ancestry/guide changes, alongside focused
-   creation21/guide3. StrictClippy/fmt pass after a behavior-equivalent history
-   rewrite; affected history63 and GUI build also pass. Preserve exact artifact
-   scopes and serialize future Cargo/source leases.
-2. Named process/scenario/machine creation, exact Undo/Redo and nine-file reopen
-   have passed at actual minimum size. Wide/minimum cancellation passed; SA draft
-   crash recovery is active. Address observed blank canvases and prerequisite
-   creation detours through the staged-source plan: source subform retains the
-   parent draft and final adoption atomically creates prerequisite and consumer.
-   First slice covers Lifeline, process Work and machine owner, with semantic
-   first-action prompts. Independent review precedes final integration/native QA.
-3. Operate the rebuilt app at minimum/normal sizes. Complete the saved basic
+1. Natively verify frozen contextual GUI `52DE82E4…`, now launched in the isolated
+   contextual-source stage (now closed for reboot). The 13-file source slice passed 23 focused tests, 3 guide
+   tests, strict all-target Clippy, matching build and formatting. Full 675/675
+   covers the preceding snapshot only; no full 676 result exists. Preserve
+   immutable artifacts and serialize future compiler/source leases.
+2. Exercise the implemented source subform for Lifeline, process/chain Work and
+   machine owner, plus semantic first-action prompts. Verify parent-draft
+   retention, explicit prerequisite and consumer adoption, exact source/history,
+   cancellation and recovery against the independent staged-source oracle.
+   Final source guards and guide corrections are complete and reviewed; native
+   acceptance remains; source/evidence are integrated in `df6f595`. Named creation, nine-file reopen and
+   SA pending-draft recovery already have their separate native passes.
+3. Complete local SA B2 and the saved basic
   supplementary move/camera/invalid-draft and minimum-size story; the main basic
   model and explicit transition passed full Project+SourceBundle, Undo/Redo and
-   reopen on candidate3 at wide size. Exercise new
-   scenario workspace, creation and caller return with real inputs and saved
-   model evidence, then correct and reverify concrete defects.
+   reopen on candidate 3 at wide size. OA B2 Action, State, bound Reuse and Fragment
+   now pass complete model/two-source Create, one Undo, one Redo and final OA
+   reopen/Save with exact original identities. Preserve the existing B3 layer/size
+   scope; do not infer SA B2 or broader camera/focus coverage from these passes.
 4. Integrate standalone B4 scenario lifetimes and the external independent
   scenario contract without overwriting local layout work. Resolve source-derived
   lifetime versus insertion bounds, activation-after-Delete and lane-map issues.
@@ -39,12 +45,20 @@ The updated objective explicitly requires functional constraints/calculations,
 quantities/units and maintained model libraries. Current metadata/includes are
 insufficient. This work runs independently of useful behavior improvements.

+Peer comment 231 ratifies schema 8/local-definition core steps in an isolated
+worktree. Coordinate those actual shared types and ownership before local
+integration; the current local core remains descriptive. Source grammar,
+evaluation, server/CLI/UI representation and acceptance are separate unfinished
+steps. Peer chooser comment 224's corrected mounted tests remain prepared,
+not executed. Do not replace either peer effort with a parallel local design.
+
 The newest objective also requires complete uncluttered text-only workflows.
 Combine the local three-task usability audit with the other host's language/
 identity/API design. Two concise current-grammar recipes now pass their bounded
-REST identity/source/persistence experiment. Next evaluate
-cross-file definitions/references, safe alias rename and identity-preserving
-patch preview on repeated-name modular models. Do not equate shorter examples
+REST identity/source/persistence experiment. The published CLI now covers checked
+stabilization and typed alias rename with exact source-preserving preview/write.
+Next evaluate cross-file definitions/references and engineering task completion
+on repeated-name modular models. Do not equate shorter examples
 or parser throughput with task usability, and do not silently change omissions.

 - Compare real candidate semantics before large changes. Use primary Capella,
@@ -55,15 +69,23 @@ or parser throughput with task usability, and do not silently change omissions.
 - Probe libraries through two projects/two instances, pinned offline content,
  exports/dependency closure, bindings, distinct origin/local identities, updates
  with local divergence, detachment and exact transactional rollback.
- Run a small pure-core experiment for the selected candidate. Independent
-  criticism must precede broad schema/source/API migration. Retain current typed
-  Project, Command and source-writer boundaries unless evidence requires change.
+- Review and test the peer-ratified pure core and its explicit migration/admission
+  boundaries before local integration. Retain independent falsifiers and current
+  typed Project, Command and source-writer guarantees across representations.
 - Implement the ratified contracts across validation, visitors, deletion,
  identity, OA/SA transitions, source/reST, schema/REST, ergonomic graphical
  authoring and help. Add real examples and independent parity acceptance.

 ## Integration and release

+- GUI/server release 1, `v0.2.0-preview.authoring.20260911`, and standalone CLI
+  release 2, `cli-v0.2.0-preview.authoring.20260911`, are published and read back.
+  Their exact notices, archive, runtime and uploaded-asset evidence is preserved.
+  CLI packaging is integrated at `27df4a3`; instruction sync `07eb3cd` and
+  contextual source checkpoint `df6f595` and its raw evidence are integrated.
+  CLI publication `d95b1ab` and OA native checkpoint `c4bad4b` are also integrated;
+  then publish later coherent milestones under the assigned owner. Preserve each
+  artifact's source/profile/native scope and complete final-release gates separately.
 - Publish coherent commits and verified bundle transfers through Gitea; keep
  concise host-scoped handoffs and Wiki. Do not overwrite another host's branch.
 - Refresh relevant source/schema/example/doc gates and run current core,
@@ -71,9 +93,12 @@ or parser throughput with task usability, and do not silently change omissions.
 - Build matching optimized desktop/server packages. Regenerate complete notices
  for actual inputs and verify archive contents, hashes and clean-runtime launch.
  Historical ELF fixtures and build preparation do not replace execution.
- Obtain a viable Linux environment and run current GUI/server workflows there.
-  Supported WSL2 failed; no repeated rejected workaround. Continue independent
-  work while the environment question is pending.
+- Follow the external owner's supported Linux guest route and run current
+  GUI/server workflows when viable. This local host has no usable Linux runtime;
+  supported WSL2 failed. Preserve failed attempts rather than repeating rejected
+  workarounds, and continue independent Windows/semantic work.
+- After the user reboot, check local Ubuntu registration and launch first. A
+  version2 default alone is not an installed/running Linux environment.
 - Conduct fresh independent requirements, semantic, usability, architecture,
  correctness, runtime and documentation reviews. Resolve all material findings,
  reverify affected behavior and only then declare release completion.
@@ -0,0 +1,59 @@
+# Restart handoff — 2026-09-11
+
+Codex-9e8r6t /root. User explicitly requested a reboot pause to make WSL2/Ubuntu
+available. Full PROJECT_GOAL remains active and incomplete. Resume only after
+the user returns; do not schedule automatic work during the reboot.
+
+## Saved state
+
+- Branch `codex/release1-9e8r6t`: contextual source `df6f595`, CLI publication
+  evidence `d95b1ab` and complete local OA scenario evidence `c4bad4b` were pushed
+  and read back. The following reboot commit also preserves reviewed WIP below.
+- Both Windows Studio/server and standalone CLI prereleases remain published.
+  This checkpoint does not update either release or establish Linux acceptance.
+- Immutable GUI52DE82 native source trial: Lifeline Save-adoption and Chain
+  direct Create each passed complete model/source, one Undo and one Redo with
+  original IDs. Machine direct Create/Save passed six exact files; one Undo/Save
+  passed four reachable/six physical files. Machine Redo/reopen remain pending.
+  Test GUI closed normally, and its returned window was absent at 13:38 UTC.
+  `work` contains the saved Machine Undo state. Do not infer persistent history;
+  use preserved first machine checkpoint for isolated reopen and a fresh trial
+  for missing history coverage. See release-contextual-source-native-20260911.md
+  and experiments/contextual-source-native-20260911/README.md.
+- Reviewed WIP: source_draft.rs essentials-first layout, explicit wrapped kinds
+  before unbounded parent text, plus creation.rs staged-owner caption fix.
+  Three real Paragraph tests are prepared. First compile failed in test helpers
+  (ambiguous macro and wrong Id constructor); corrected only those helpers.
+  Corrected focused2 was interrupted for this reboot before any tests ran;
+  Clippy/fmt/GUI did not launch. There is NO new passing suite or matching GUI.
+- Worker release_audit stopped its command with Ctrl+C; all Cargo/rustc/linker
+  processes were absent. All 238 frozen input hashes were unchanged.
+  Final source_draft SHA prefix C8D36BD6; creation SHA prefix 0FB19BE3.
+  Exact freeze inputs3 SHA256
+  `6B3F3088FF18AF3899C3764B3F3671DA9240A5DE184D871BF08F8012456E556B`.
+
+## Next actions after reboot
+
+1. Read AGENTS, PROJECT_GOAL, STATE, PLAN and latest Gitea issue 1/2 comments and
+   relevant Wiki. Preserve Codex-956atf canvas/chooser/schema8 and Codex-ytr83r
+   B4/Linux ownership. User issue2 comment250 allows domain-constrained diagram
+   manipulation; arbitrary free movement is not required.
+2. Recheck `wsl --list --verbose`. Before reboot it reported no installed
+   distribution despite default version2. Launch/setup Ubuntu as needed with
+   the user handling any authentication. Verify a real usable Linux environment
+   before claiming a build. Do not repeat rejected VM workarounds.
+3. Validate the frozen input manifest, then resume a new focused3 run. Keep
+   focused1 failure and focused2 interrupted evidence. On a pass, run strict
+   desktop all-target Clippy, formatting and matching GUI build; use a distinct
+   immutable stage. No broad full-suite repeat without a new reason.
+4. Root alone performs native Computer Use with @oai/sky. Relaunch the corrected
+   artifact in a fresh profile and verify initial Name/kind/parent visibility at
+   1100×700, the owner label, direct Lifeline Create, remaining cancellation/
+   recovery and machine history/reopen using independent expected contracts.
+5. Continue SA B2, basic supplementary workflows, peer integration, complete
+   semantic/text/REST/library work, Windows/Linux packaging and fresh final
+   cross-disciplinary acceptance. The full release remains unfinished.
+
+Private runtime and build stages under `.local` are retained; no temporary
+binary, token or credential was committed. Raw interruption/native records are
+archived separately with exact hashes. All workers are idle for the reboot.
@@ -1,7 +1,8 @@
 # Progress Ledger — first release

 Updated 2026-09-11, Codex-9e8r6t `/root`, Windows host.
-**Release remains unaccepted; meaningful product and integration work is active.**
+**Release remains unaccepted. Work is paused for the user's requested reboot.**
+See [restart handoff](RESTART_HANDOFF.md) for exact saved state and next actions.

 ## Objective and current source

@@ -12,14 +13,67 @@ in that file. It requires constraints/calculations, quantities/units and reusabl
 libraries, plus uncluttered human/AI text-only modeling at small and large scale.
 Long homogeneous lists and poor behavior editing remain explicit concerns.

-Local branch: `codex/release1-9e8r6t`, base `1797516`, committed head `4bb4aaf`.
-Named behavior creation, its guide and independent oracle, concise text-first
-examples and prior integration evidence are committed and remotely transferred.
-Its final ancestry/guide correction passed full653; post-lint history63, strict
-Clippy/fmt and matching GUI build passed. Current uncommitted work corrects the
-oracle's retained-file rule, clarifies source-7 constructor defaults, records
-native creation and implements contextual prerequisite creation. Preserve all
-workers' edits. No open Gitea PRs at the latest read, comments through138.
+Local branch: `codex/release1-9e8r6t`, substantive source checkpoint
+`df6f59562643b7771ecf0c972f8655f3e3f1c4da`, committed, pushed and read back.
+It follows the user's instruction sync `07eb3cd`.
+The preceding committed and pushed code/package checkpoint is
+`27df4a3945ebc97cd7cbde61f6aeea7a91c680d3`. It includes named behavior creation,
+source CLI, the nine CLI packaging changes and reviewed evidence. Source CLI
+semantic commit `01b76a1`, packaging assembly `a0a48e8` and release integration
+`27df4a3` are distinct. Contextual prerequisite creation, its reports/oracle and
+40 raw evidence files are integrated in `df6f595`; native acceptance continues.
+All 238 frozen build inputs and 44 exact index artifacts passed before commit.
+Gitea issue 1 records the handoff in comment 242. Remote AGENTS.md at blob
+`4b8465c8993107062ad2974c15a958d449530e92` adds the maintenance instructions
+announced in comment 229: concise current entrypoints, durable history and
+coordinated preservation rather than indiscriminate deletion.
+
+## Current acceptance checkpoint — reboot pause
+
+CLI publication evidence `d95b1ab` and complete OA native evidence `c4bad4b` are
+also pushed and read back. The reboot checkpoint preserves reviewed layout/owner
+caption WIP, native evidence and interrupted compiler records; it is not a new
+accepted build. No worker/compiler/test GUI remains active.
+
+- CLI `BAD169F8…E3559`: author 12/12, strict all-target Clippy/format/build pass;
+  independent 183 assertions across 21 fresh processes pass. All four committed
+  experiment files retain their measured bytes. JSON describes complete changed
+  files, not a saved whole-candidate plan. See the two source-CLI reports.
+- Contextual source first frozen artifact `6E677F58…8CC0`: focused 22/22 and full
+  desktop 675/675 pass, 448.33 seconds execution. The later inactive-source origin
+  bypass and guide wording are fixed and independently reviewed. Final source
+  across 13 desktop files passed 23 focused tests, 3 guide tests, strict all-target Clippy,
+  matching GUI build and formatting. GUI SHA256 starts `52DE82E4`; its test
+  inventory is 676. There is no full 676-suite pass. Root verified the frozen
+  inputs/executable and launched PID 7212 in the isolated
+  `.local/native-qa/contextual-source-20260911-v1` stage. Lifeline Save-adoption
+  and Chain direct Create each pass complete model/source and one Undo/Redo.
+  Machine direct Create/Save and Undo/Save pass; its Redo/reopen remain pending.
+  The saved GUI closed normally for reboot. See
+  [native results](release-contextual-source-native-20260911.md).
+- Native scenario B3: both OA use-return paths pass wide and minimum sizes;
+  both SA paths pass minimum focused canvas. Pending disabled Open preserves the
+  draft; explicit Cancel/Save matches exact baseline. B2 OA Action, nested State,
+  explicitly bound Reuse and Fragment all pass independent complete Project and
+  two-source Create/Save, one Undo/Save and one Redo/Save predictions, retaining
+  original exact identities. Final OA reopen/Save also passes. SA B2 remains
+  pending locally; B3's earlier size/layer scopes are unchanged. See
+  [local scenario native evidence](release-scenario-native-local-20260911.md).
+- Root published GUI/server release **1**, `v0.2.0-preview.authoring.20260911`,
+  at 12:40:51 UTC, using source `2ec72d4`, D4D9 GUI and EFEE server.
+  ZIP `664F30B6…` has 559 files and passed
+  strict notices, independent complete archive/source correspondence, clean GUI
+  launch/example/Save/help/close and server create/get/restart persistence. All
+  three release assets passed full downloaded readback. Reports/raw evidence are
+  committed in `6a61061`; see [GUI/server publication](release-authoring-prerelease-published-20260911.md).
+  This is a prerelease, not full OA/SA acceptance.
+- Root published CLI release **2**, `cli-v0.2.0-preview.authoring.20260911`, at
+  12:50:39 UTC. Tag and release readback match `27df4a3`, draft false and
+  prerelease true. ZIP `2B051F8C…` has 114 files, 27 notice packages and exact
+  BAD169F8/F456 executable/runtime. Independent clean CLI 156 assertions across
+  10 invocations pass; all three uploaded assets passed downloaded hash readback.
+  [Publication report](release-cli-prerelease-published-20260911.md) preserves
+  the exact records and distinguishes local CRLF notes from the public LF body.

 ## Completed work and scoped evidence

@@ -27,33 +81,34 @@ workers' edits. No open Gitea PRs at the latest read, comments through138.
  `codex/palette-authoring-20260910`. Candidate 2 focused tests, GUI build and
  strict desktop Clippy passed. Its native F2 rename/Save/Undo/Redo matched exact
  three-file expectations; Entity creation matched the complete independent
-  model/source oracle. Candidate3 completed ordinary Activity, existing placement,
+  model/source oracle. Candidate 3 completed ordinary Activity, existing placement,
  allocation, direct Interaction and F2: complete basic model/four sources PASS.
  Explicit SA actor/destination transition passed complete model/six sources;
  Undo four-source baseline, Redo six-source result and reopen all passed. Six
  physical files are byte-identical across reopen/reuse-preview Cancel/Save.
  Immutable checkpoints/logs: `.local/native-qa/palette-20260910-v3/`.
 - Recovery naming autofocus: `31b7dc3`, 13 focused checkpoint tests passed after
-  integrated compilation. Its new autofocus behavior still needs native check.
+  integrated compilation. The later SA behavior draft's native recovery,
+  autofocus and Escape evidence is recorded in the creation report below.
 - Other-host behavior/topology/scenario/history: original `01bb52a` integrated
  as `057eddd`; constructor cache fix `b6b76ef` integrated as `a70de55`; explicit
  history seed fix `4ecad78` cherry-picked as `81668f9`.
- Corrected immutable desktop artifact completed **631/631 passed**,408.18s,
-  exit0; all three prior618-artifact failures are fixed. Exact artifact/logs in
-  `.local/scenario-workspace-20260910/tests-81668f9/`. It covers3978bbe workspace,
+- Corrected immutable desktop artifact completed **631/631 passed**, 408.18 seconds,
+  exit 0; all three prior 618-artifact failures are fixed. Exact artifact/logs in
+  `.local/scenario-workspace-20260910/tests-81668f9/`. It covers `3978bbe` workspace,
  Back/OpenUse guards and both history fixes, but not later Sensor/creation work.
 - A real same-size owner/document Sensor regression led to `d114a27`; affected
-  scenario53/53 passed. Current native candidate3 predates that correction.
-  Mounted workspace tests cover500×570 and wide geometry; native current-build
-  scenario acceptance remains pending.
- Named local creation passed final21/21 and guide3/3 after ancestry-label
-  correction. The matching immutable desktop suite passed **653/653**,362.83s,
-  zero failures/ignored; exact artifact864B0F…E86/log/result under
+  scenario 53/53 passed. Historical native candidate 3 predates that correction.
+  Mounted workspace tests cover 500×570 and wide geometry; later local native
+  B2/B3 results have the separate scopes recorded above.
+- Named local creation passed final 21/21 and guide 3/3 after ancestry-label
+  correction. The matching immutable desktop suite passed **653/653**, 362.83 seconds,
+  zero failures/ignored; exact artifact `864B0F…E86` and logs under
  `.local/behavior-creation-20260911/tests-final`. Independent integration review
-  found no additional correctness blocker. StrictClippy/all-targets/-Dwarnings
-  and workspacefmt pass after one behavior-equivalent history_fields let-chain
-  correction; affected history63/63 and matching GUI rebuild pass. Current native
-  GUI is `gui-verified` SHA D4D9C2BD…B20C31. At actual 1100×700 client size,
+  found no additional correctness blocker. Strict Clippy with all targets and
+  `-D warnings`, plus workspace formatting, pass after one behavior-equivalent history_fields let-chain
+  correction; affected history 63/63 and matching GUI rebuild pass. This frozen
+  creation GUI is `gui-verified` SHA D4D9C2BD…B20C31. At actual 1100×700 client size,
  named OA Process, explicit ParticipantInteraction Scenario with capability
  context and SA owner-linked State machine plus requested first view passed
  complete independent Project/SourceBundle checks at 7/8/9 files. Each single
@@ -81,18 +136,19 @@ workers' edits. No open Gitea PRs at the latest read, comments through138.
  Historical Windows-input ZIP has 557 files; real Linux notices close over
  339 packages/681 files. Linux archive adapter used inert ELF fixtures, not
  actual current application binaries. Exact Fira/Cantarell notice Git bytes
-  were independently verified. Current-source notices need regeneration.
+  were independently verified. Later exact GUI/server and CLI packages have
+  their own regenerated notices and published artifact evidence above.
 - Independent native Capella creation study completed, saved and closed cleanly;
  report `release-capella-creation-study-20260910.md` is complete. Viewpoint-first
  naming and distinct local create/existing selection inform the implementation.
 - Textual usability audit completed three static tasks and example counts. The
  existing grammar already permits omitted initial IDs/defaults; key gaps are
  cross-file reference context, safe alias refactoring and reviewed patches.
-  Source7 EBNF/schema documentation and viewpoint omission guidance are corrected;
+  Source-7 EBNF/schema documentation and viewpoint omission guidance are corrected;
  generated language HTML passed strict docutils. Both concise snippets passed
  26 real REST requests: identity-only stabilization, exact no-op/name edit,
-  stale/invalid nonmutation and restart persistence. All120 current core/server
-  files match the preserved source7 binary's documented snapshot. This closes
+  stale/invalid nonmutation and restart persistence. All 120 current core/server
+  files match the preserved source-7 binary's documented snapshot. This closes
  the bounded recipe gap, not large-model or native text-editor acceptance. The
  verified recipe is now `examples/text-first` and in the language reference.

@@ -105,34 +161,36 @@ Detailed evidence: [integrated gates](release-integrated-gates-20260910.md),

 ## Active ownership and execution

- Root: integration, common ledgers, source/API checks and exclusive native input.
-  Full653 is terminal PASS. V4 creation/Undo/Redo/reopen is complete; actual SA
-  pending-draft crash recovery is active on the same verified GUI. The forced
-  interruption targeted only isolated QA PID5184 after checkpoint persistence;
-  restarted PID1284/window6161106 uses the same private profile and runtime.
-  Recovery is now terminal PASS: full draft fields/IDs retained, autofocus,
-  first Escape and a fresh Save As preserve the complete nine-file model. The
-  current wide GUI is saved on `checkpoint-recovery-cancel/project.arcadia`;
-  treat that checkpoint as immutable and reopen a work copy before editing.
- `release_audit`: prior creation and constructor reports frozen. Now owns the
-  staged prerequisite creation implementation for Scenario Lifeline/process Work/
-  New machine owner, semantic first-action prompts, relevant App/recovery/guide
-  wiring and focused tests. Cargo writer is reserved to this worker when needed;
-  freeze source during tests and request independent review before integration.
- `behavior_audit`: v2 native oracle frozen, warnings-denied compilation and
-  falsifiers pass, executable056EEFD…F6A36. Now independently challenges staged
-  source semantics and expected behavior; no production/Cargo/native ownership.
- `palette_finish`: native report/evidence frozen: 13 creation oracle commands
-  and 19 separate recovery checks pass. Now owns new `crates/oa-cli` for local
-  source check/lint, preview/explicit-write stabilization and alias rename/diff.
-  Uses existing source-file diagnostics/expectations/journal writer, no grammar
-  or core changes. Root owns workspace/lock integration; serialize Cargo with
-  release_audit. Preview UUIDs remain candidates until that invocation writes.
- Separate host Codex-956atf: standalone scenario lifetime projection, independent
-  native scenario oracle, quantity/calculation design and library design. It has
-  its own cold toolchain/results. Its source-only reviews are not local passes.
+All local workers are idle for reboot. `release_audit`'s two-file display freeze
+has independent source review; corrected focused2 was interrupted before tests,
+and lint/fmt/new GUI remain unexecuted. `palette_finish` preserved native raw
+evidence; `behavior_audit` closed the bounded review. Resume through
+[RESTART_HANDOFF.md](RESTART_HANDOFF.md); the following ownership remains reserved.

-Verified bundles for eb5161b and 4ecad78 are retained in
+- Root: exclusive native input, contextual GUI 52DE82 acceptance, remaining
+  local SA B2, integration, commits, publication and Wiki updates.
+- `palette_finish`: staged-owner caption correction and native preservation done;
+  stopped, with no active compiler/native lease.
+- `release_audit`: source-card layout and real Paragraph tests frozen; compiler
+  stopped for reboot with explicit interrupted evidence. Next is fresh focused3.
+- `behavior_audit`: independent layout/caption review closed; stopped.
+- Codex-956atf: external chooser/workspace work. Comment 224's corrected focus
+  and nested-scroll regressions are **prepared, not executed**. Comment 231
+  records peer-ratified schema 8/local-definition core implementation in isolated
+  `codex/analysis-core-20260911`; it is not integrated into this local descriptive
+  core. Numeric compilation and further representations retain peer ownership.
+- Codex-ytr83r: external B4 Scene/lifetime integration and supported Linux guest
+  route. Local Windows has no current Linux runtime. External results are
+  host-scoped; failed route attempts remain in their dated reports.
+
+User issue2/comment250 calls for consistent, domain-constrained interactive
+diagrams, not necessarily arbitrary placement. Codex-956atf owns the shared
+canvas-shell implementation in an isolated worktree (comment261). Existing
+technical Canvas widgets and source cards do not close this requirement.
+Before reboot, local WSL defaulted to version2 but listed no installed distro.
+User will restart; verify Ubuntu actually runs afterward before Linux gates.
+
+Verified bundles for `eb5161b` and `4ecad78` are retained in
 `.local/integration-20260910`. Local refs `codex/behavior-snapshot-eb5161b` and
 `codex/history-seed-20260910` preserve exact commits. B4 lifetime projection and
 its guide delta are not integrated yet; coordinate shared scene wiring. Review
@@ -144,57 +202,64 @@ unassigned-lane map differences that must be addressed before acceptance.
 1. Finish native basic supplementary move/camera/focus/minimum matrix and current
   scenario/process/state tasks. Main basic/transition/history/reopen passed at
   wide size. Check raw drafts, recovery, exact source and real task completion.
-2. Implement/review/natively verify contextual
-   missing-source and first-action flows. Named creation/history/reopen passed;
+2. Natively verify and integrate the frozen contextual missing-source and
+   first-action implementation. Named creation/history/reopen passed;
   operand-editing and qualified Action allocation remain separate open work.
 3. Constraints/calculations and quantity compatibility are currently descriptive
   metadata; same-project includes are not maintained cross-project libraries.
-   Independent semantic designs and falsification are active before broad schema
-   changes. See [library review brief](release-library-candidate-review-20260910.md).
+   Peer schema 8/local-definition implementation is now ratified and staged in
+   its isolated worktree (Gitea comment 231); local integration and all required
+   representations/acceptance remain pending. See [library review brief](release-library-candidate-review-20260910.md).
   Other-host proposals expose cosmetic package revision/type compatibility,
   subjectless analysis closure and text-only instance normalization decisions;
-   full reports and paired criticism are now available from verified c6d296a.
+   full reports and paired criticism are now available from verified `c6d296a`.
   Its 218-assertion maintenance experiment supports explicit baseline values
   with one-level Case overrides; complete freeze and effective-case evaluation
   are required. Refined baseline/library contracts remain active externally.
-4. Implement and evaluate the source-only CLI baseline, then compare language
-   improvements using both local usability and complete other-host proposals.
+4. Build on the published standalone CLI and compare language improvements using
+   both local usability and complete other-host proposals.
   Current grammar+tooling, domain syntax, namespaces and portable identity
   modules remain distinct candidates. Concise examples/CLI alone do not prove
   uncluttered modular engineering authoring or safe large-model changes.
 5. Run coherent current desktop/core/server, specification, examples, REST and
   optimized packaging gates after integration. Prior passes remain scoped.
-6. Current Linux runtime requires a viable environment: supported WSL2 import
-   failed once with HCS_E_HYPERV_NOT_INSTALLED; no distro registered. The user
-   has a pending environment question. No repeated denied QEMU workaround.
+6. Obtain current Linux runtime acceptance through the external owner's supported
+   guest route. Local WSL2 import failed with HCS_E_HYPERV_NOT_INSTALLED and no
+   distro registered; this host still has no usable Linux runtime. Preserve
+   recorded route failures and do not repeat a rejected workaround.
 7. Fresh independent cross-disciplinary release review remains required after
   actual workflow and semantic acceptance, with all material findings resolved.

 ## Handoff and publication

 Use Gitea issue #1 and current Wiki to coordinate as **Codex-9e8r6t**. Read before
-resuming; preserve the other host's work. Direct Git push now fails authentication;
-anonymous fetch and Gitea MCP still work. Integration3978bbe was published and
+resuming; preserve the other host's work. User issue 1 comment 178 authorizes programmatic
+reuse of existing MCP credentials for Git/REST without printing or committing them.
+Authenticated non-force push and remote readback now pass; current branch is
+available directly. Historical bundle transfers remain reproducible. Integration `3978bbe` was published and
 independently fetched/hash-verified as a Git bundle on
-`codex/integration-transfer-20260910`; Wiki `Integration3978bbe` and issue#97 own
+`codex/integration-transfer-20260910`; Wiki `Integration3978bbe` and issue #97 own
 exact transfer instructions. Other host has integrated it and an equivalent
-Sensor fix. Creation4bb4aaf was likewise published on
+Sensor fix. Creation `4bb4aaf` was likewise published on
 `codex/integration-transfer-20260911`, file
-`harness/transfers/creation-4bb4aaf.bundle.b64`: decoded105022 bytes,
+`harness/transfers/creation-4bb4aaf.bundle.b64`: decoded 105022 bytes,
 SHA256 `0DEFAE91A56430076C432758F923BC0675911DA9FA7588C9961FF15F47EAEBF6`,
-prerequisite3978bbe. Anonymous Git readback, strict base64 length/hash check and
-`git bundle verify` passed; issue#128 gives selective integration instructions.
-Publish subsequent corrected oracle/native/default evidence similarly; preserve
-the other host's later B4/reference chooser/design work and avoid duplicates.
+prerequisite `3978bbe`. Anonymous Git readback, strict base64 length/hash check and
+`git bundle verify` passed; issue #128 gives selective integration instructions.
+Corrected oracle/native/default evidence is published as `2ec72d4` on the same
+branch, file `harness/transfers/evidence-2ec72d4.bundle.b64`: decoded 185563 bytes,
+SHA256 `F74E14EE394BCC026E24987C8526AA7E769DDE748FE38117532824EC19AE159F`,
+prerequisite `4bb4aaf`. Anonymous readback/hash and bundle verification pass (#150).
+Preserve the other hosts' B4/reference chooser/design work and avoid duplicates.

-Other-host c6d296a transfer is verified and imported as local
+Other-host `c6d296a` transfer is verified and imported as local
 `codex/behavior-snapshot-c6d296a`: 334830 bytes,
 SHA256 `526A80E2D32ED0E57A7B2372B5F02D4652E8751DFEBA81953C4F045225D6AACB`,
-prerequisite1797516, from `codex/behavior-transfer-20260910` file
+prerequisite `1797516`, from `codex/behavior-transfer-20260910` file
 `harness/transfers/behavior-c6d296a.bundle.b64`. Selected analysis/library/text
 reports, criticism, experiments and independent scenario oracle are restored;
 51 evidence files compare byte-for-byte with Git blobs. No source/ledger merge.
-Issue#136/#143 and refreshed Wiki Authoring20260911 record the handoff.
+Issue comments 136/143 and Wiki `Authoring20260911` record the handoff.

 The old ledgers, including all historical platform and native evidence, were
 archived byte-for-byte before this consolidation in
@@ -1,6 +1,9 @@
 # Task Ledger — first release

-Updated 2026-09-11 by Codex-9e8r6t `/root`. Release not accepted.
+Updated 2026-09-11 by Codex-9e8r6t `/root`. Full release not accepted.
+
+User requested a reboot pause. All local workers and native/compiler processes
+are stopped; [RESTART_HANDOFF.md](RESTART_HANDOFF.md) records exact resumable state.

 ## Goal and success criteria

@@ -27,6 +30,14 @@ passing checks and fresh independent cross-disciplinary review.
 - Gitea coordination and shared Wiki updates are required. Identify host and
  worker consistently and preserve overlapping work. Explicit project messages
  are authorized; unrelated external messages are not.
+- Updated AGENTS requires runnable versioned milestone prereleases. User
+  issue 1 comment 178 authorizes reusing existing MCP credentials programmatically for
+  Git push and REST asset upload, without printing or committing credentials.
+- Remote AGENTS.md, blob `4b8465c8993107062ad2974c15a958d449530e92`, adds concise
+  harness/Gitea maintenance and preservation of useful historical knowledge
+  (user comment 229). Root's instruction sync `07eb3cd` is integrated;
+  contextual source `df6f595`, CLI publication `d95b1ab` and OA native evidence
+  `c4bad4b` are committed and pushed.

 ## Verified facts

@@ -35,38 +46,61 @@ The current model has one typed core, validated atomic commands and coordinated
 Project/SourceBundle history shared by desktop and REST. Included files share
 one global namespace. Current Constraint expressions are strings; numeric unit
 strings do not convert values or establish dimensional compatibility. There is
-no package/version/instance/update contract for cross-project libraries.
+no locally integrated package/version/instance/update contract for cross-project
+libraries; peer implementation is tracked separately below.

-Candidate3 completed the main basic/transition/history/reopen story with exact
-four/six-source independent model oracles; supplementary native cases remain.
-Corrected immutable desktop631/631 passed; later Sensor correction passed53/53.
-Final creation21/guide3 and matching full desktop653/653 passed after ancestry
-label correction. StrictClippy/fmt pass after one behavior-equivalent history
-let-chain rewrite; affected history63 and matching GUI build pass. Native named
-creation passes complete model and 7/8/9-source oracles, individual Undo/Redo and
-byte-exact nine-file reopen at actual minimum size. Cancellation preserves the
-six-file baseline. Blank process/scenario canvases provide no useful first-action
-prompt; this is an observed usability finding. SA draft recovery remains active. Mounted
-layout tests establish pane geometry, not native task acceptance. Packaging checks
-and independent review are scoped to supplied binaries/fixtures, not release
-acceptance. Supported WSL2 import failed; a current Linux runtime is unavailable.
+The main basic/transition/history/reopen story passed exact independent model
+and four/six-source checks; supplementary native cases remain. Named creation
+passed 7/8/9-source oracles, one Undo/Redo and byte-exact reopen at actual minimum
+size. Cancellation retained its six-file baseline; SA draft recovery retained
+fields/identities, autofocus and Escape/Save As behavior. The D4D9 blank-canvas
+finding motivated the newer first-action implementation. Detailed historical
+suite and native scopes remain in [STATE.md](STATE.md) and its linked reports.
+Mounted geometry and bounded package passes do not establish full release
+acceptance. This local host still lacks a current Linux runtime.

 Current grammar supports omitted initial IDs/defaults, lexical ownership, forward
-references and preserved source. Static audit found no exposed project-wide
-reference navigation/alias refactor; current Find searches the active buffer.
-The process example has128lines/14UUIDs/31empty-default lines, while meaningful
-shorter source is possible. Two concise snippets passed26 real REST requests,
+references and preserved source. The earlier desktop audit found no exposed
+project-wide reference navigation/alias refactor; its Find searched the active
+buffer. The later CLI supplies typed alias rename. The audited process example
+had 128 lines, 14 UUIDs and 31 empty-default lines, while meaningful shorter
+source is possible. Two concise snippets passed 26 real REST requests,
 including identity-only normalization, exact name-only edits, rejected writes and
 restart persistence. Counts and this small trial prove neither improved native
 usability nor large-project performance.

-## Assumptions
+CLI tooling is implemented, integrated and published: semantic source `01b76a1`,
+packaging assembly `a0a48e8`, release integration `27df4a3`. Author 12 tests and
+independent 183 semantic assertions pass; independent clean-package review adds
+156 assertions across 10 processes. This is a bounded source-editing tool, not
+proof of complete large-model language ergonomics.

+GUI/server release 1 and standalone CLI release 2 are published with runnable
+Windows artifacts, full dependency notices and downloaded asset verification.
+Independent archive/source and clean runtime checks pass in their declared scopes.
+See [CLI publication evidence](release-cli-prerelease-published-20260911.md).
+The newer 13-file contextual-source slice is committed/pushed as `df6f595`,
+with its independent oracle and exact raw evidence. It passed focused 23, guide 3, strict
+Clippy, matching GUI build and formatting. The full 675 suite covers only its
+predecessor; no full 676 suite has run. Root launched the exact 52DE82 GUI in
+isolation: Lifeline Save-adoption and Chain direct Create pass complete source,
+one Undo and one Redo. Machine direct Create and one Undo pass; Redo/reopen are
+pending. The saved GUI is closed. Later layout/caption source was independently
+reviewed but its corrected compilation was interrupted before tests for reboot.
+
+Local OA B2 now passes all four Action/State/explicitly bound Reuse/Fragment
+Create, one Undo/Save, one Redo/Save and final OA reopen/Save against independent
+complete model/two-source predictions and original exact identities. SA B2 is
+pending locally. Existing B3 OA wide/minimum and SA minimum return scopes remain
+unchanged; neither these passes nor mounted geometry tests imply broader acceptance.
+
+## Assumptions
 - Contextual named creation, remaining-height canvas and local source insertion
  can reduce actual authoring detours. Native engineer tasks must establish this.
 - A bounded pure calculation/quantity model and pinned library content may fit
  the existing typed core better than a general-purpose metamodel rewrite.
-  Independent designs and experiments must test this before ratification.
+  Peer-ratified core staging must still be checked against independent engineering
+  tasks and integrated across all required representations.
 - Existing OA/SA semantics provide a useful foundation; neither their presence
  nor old acceptance proves full conformance to the updated release objective.

@@ -94,21 +128,32 @@ usability nor large-project performance.
  current parent draft, then validate/adopt source and consumer atomically. This
  preserves intent and one-step history; a separate Architecture excursion or
  early source commit loses those guarantees. Initial Lifeline/process Work/
-  machine-owner adapters and semantic first-action prompts are being implemented
-  and independently challenged; acceptance remains pending. See the
+  machine-owner adapters and semantic first-action prompts are implemented,
+  reviewed and integrated with focused gates passed; scoped native results are
+  above, with remaining acceptance still open. See the
  [bounded plan](release-contextual-source-creation-plan-20260911.md).
 - Scenario workspace: compact header, optional Tools/Selection shelves, actual
  remaining-height canvas/form, pinned actions, independent scrolling and
  explicit Fit/Focus. Mounted tests support this choice; native proof pending.
- Quantities/calculations: compare additive pure analysis records, extension of
-  existing fields and external evaluation. No broad schema decision yet.
+- User issue2/comment250 clarifies that diagram manipulation may respect
+  sequence/domain constraints. Codex-956atf owns a shared canvas-shell redesign;
+  the existing controls and supporting source-card fixes do not close the issue.
+- Quantities/calculations: peer comment 231 records ratified schema 8/local
+  definitions and actual shared analysis/core types under implementation in
+  isolated `codex/analysis-core-20260911`. This is not a local schema admission,
+  evaluator or graphical/source/API parity pass; the local core remains descriptive.
 - Libraries: compare copied source, live references, generic definition/usages
  and pinned typed packages with explicit mappings and reviewed updates.
  [Falsification brief](release-library-candidate-review-20260910.md) records
-  identity, dependency, offline and conflict requirements. No ratified winner.
+  identity, dependency, offline and conflict requirements. Refined peer baseline,
+  Case, full-freeze and exact-pin/equivalence contracts are ratified externally;
+  their local integration and executable lifecycle acceptance remain pending.
 - Text authoring: use existing omission/default/identity contracts for concise
  experiments; compare source navigation/refactoring/patch assistance before
  grammar redesign. No namespace, hidden identity or omission change ratified.
+- Reference chooser: peer comment 224's corrected focus ownership, nested-scroll
+  reveal and mounted regressions are prepared, not executed. Preserve that
+  ownership and wait for its source/test handoff.

 Long-lived decisions remain in [DECISIONS.md](DECISIONS.md). New user scope and
 normative contracts supersede older prototype exclusions.
@@ -0,0 +1,12 @@
+# Interrupted display-correction gate
+
+Exact byte copies of all 13 top-level files in the private layout gate directory
+at the user's reboot pause. `manifest.json` records original sizes and SHA256.
+No executable or accepted new build exists. `focused1` failed before tests in two
+test helpers; the mechanical correction is in `inputs3.json`. `focused2` was
+interrupted with Ctrl+C before tests; its interruption record and process cleanup
+are authoritative. Later Clippy, formatting and GUI gates never launched.
+
+Earlier snapshots and runner files are historical evidence. Resume with a new
+run label after checking frozen inputs; do not overwrite failed/interrupted logs.
+See ../../RESTART_HANDOFF.md and the layout implementation/independent reports.
@@ -0,0 +1,5 @@
+{
+  "path": "crates/oa-desktop\\src\\behavior\\source_draft.rs",
+  "before": "68F396C420FFF132FF0EAB82CB2C6251477412F6F9F90AD2E76C51A259F8A69A",
+  "after": "1B5A0EC54E6CC9746F4664B70D7DB79EBC769284953D1D679D15D9B0F15A9BB7"
+}
@@ -0,0 +1,12 @@
+[
+  {
+    "path": "crates/oa-desktop\\src\\behavior\\creation.rs",
+    "before": "CA7275B5C0118CBB78F5D16254E50FADDC26DBB53816D01950064C852E296B2E",
+    "after": "0FB19BE3A5688C4BD3CA3643C47A97DA7E7F85ADD8A860CD046A0D9CB3CE9DFC"
+  },
+  {
+    "path": "crates/oa-desktop\\src\\behavior\\source_draft.rs",
+    "before": "68F396C420FFF132FF0EAB82CB2C6251477412F6F9F90AD2E76C51A259F8A69A",
+    "after": "89B08EF68F5C28E28F2F9FEAEBE67E0BE5B84EFCA1BFA6D64B4029C965701DE4"
+  }
+]
@@ -0,0 +1,16 @@
+{
+  "started": "2026-09-11T13:33:17.9133772Z",
+  "finished": "2026-09-11T13:34:24.8928438Z",
+  "exitCode": 101,
+  "args": [
+    "test",
+    "--locked",
+    "-p",
+    "oa-desktop",
+    "--bin",
+    "arcadia-studio",
+    "contextual_source",
+    "--",
+    "--test-threads=1"
+  ]
+}
@@ -0,0 +1,27 @@
+   Compiling oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)
+error[E0659]: `column` is ambiguous
+   --> crates\oa-desktop\src\behavior\source_draft.rs:651:9
+    |
+651 |         column![text(caption.to_owned()).size(12), state.view(p).unwrap()]
+    |         ^^^^^^ ambiguous name
+    |
+    = note: ambiguous because of a conflict between a name from a glob import and an outer scope during import or macro resolution
+note: `column` could refer to the macro imported here
+   --> crates\oa-desktop\src\behavior\source_draft.rs:515:9
+    |
+515 |     use super::*;
+    |         ^^^^^^^^
+    = help: consider adding an explicit import of `column` to disambiguate
+    = help: or use `self::column` to refer to this macro unambiguously
+note: `column` could also refer to a macro from prelude
+   --> /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library\std\src\prelude\mod.rs:162:12
+
+error[E0308]: mismatched types
+   --> crates\oa-desktop\src\behavior\source_draft.rs:592:48
+    |
+592 |                 if id == Some(&widget::Id::new(format!("behavior-source-kind-{kind:?}"))) {
+    |                                                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ expected `&str`, found `String`
+
+Some errors have detailed explanations: E0308, E0659.
+For more information about an error, try `rustc --explain E0308`.
+error: could not compile `oa-desktop` (bin "arcadia-studio" test) due to 2 previous errors
@@ -0,0 +1,17 @@
+{
+  "state": "interrupted",
+  "reason": "User explicitly requested stop before reboot",
+  "interrupted_utc": "2026-09-11T13:39:00.9966556Z",
+  "session": 2067,
+  "stop_method": "Ctrl+C through write_stdin",
+  "observed_session_exit_code": 1,
+  "exit_interpretation": "Interrupted shell, not a test/Cargo failure or pass",
+  "test_execution": "No test execution or terminal Cargo result observed",
+  "log": "focused2.log",
+  "log_bytes": 95,
+  "log_sha256": "7934FD5D9FACE41821BE31283D10BA11FD3FEC0D469AA775CD1623216B8B69CB",
+  "source_inputs": "inputs3.json",
+  "all_recorded_inputs_still_match": true,
+  "remaining_compiler_processes": [],
+  "later_gates": "clippy1/fmt1/gui1 not launched; no new GUI artifact staged"
+}
@@ -0,0 +1 @@
+   Compiling oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)
@@ -0,0 +1,67 @@
+[
+  {
+    "Name": "delta-from-52DE82.json",
+    "Length": 230,
+    "SHA256": "2C4535B7301A0FCDF601D7FA9B56B6D294EFAE08A659B8CD3812D13FBCF060B5"
+  },
+  {
+    "Name": "delta2-from-52DE82.json",
+    "Length": 483,
+    "SHA256": "9D151F9A0A757D781C44A6E77D4E626E85DB58D595151D69C4F89DA524C120A5"
+  },
+  {
+    "Name": "focused1-status.json",
+    "Length": 295,
+    "SHA256": "B175D9301082B4B5DBEF851EE50541F8358FFC43A34187D9ABE778AF89C50598"
+  },
+  {
+    "Name": "focused1.log",
+    "Length": 1474,
+    "SHA256": "A45BDB8336CFD1A56639BF270CB60C51FCDB06C2042AE1C2E42705E568BA1929"
+  },
+  {
+    "Name": "focused2-interrupted.json",
+    "Length": 738,
+    "SHA256": "824005BCB434897825D6776B2206DAE09C9EBFABB00A7E0705ED6D93AB4804B3"
+  },
+  {
+    "Name": "focused2.log",
+    "Length": 95,
+    "SHA256": "7934FD5D9FACE41821BE31283D10BA11FD3FEC0D469AA775CD1623216B8B69CB"
+  },
+  {
+    "Name": "inputs1.json",
+    "Length": 44240,
+    "SHA256": "AF00C1DD7DD564FA18AA0B8B689A869F0812E4A634F2794A958A8AB427BE2A1E"
+  },
+  {
+    "Name": "inputs2.json",
+    "Length": 44259,
+    "SHA256": "89CBCFA048A42C3DF41A08A7F22AFB435B44C6A567FE0E71A15067A8BE972E99"
+  },
+  {
+    "Name": "inputs3.json",
+    "Length": 44194,
+    "SHA256": "6B3F3088FF18AF3899C3764B3F3671DA9240A5DE184D871BF08F8012456E556B"
+  },
+  {
+    "Name": "process-cleanup.json",
+    "Length": 299,
+    "SHA256": "DDF1EDDE56C3136B5D067383FB55924494EC3243FECDB32A4395787559A7020D"
+  },
+  {
+    "Name": "run-gates1.ps1",
+    "Length": 1257,
+    "SHA256": "E139E7FD25502A73316B2B8021E9AEFDDF03CEF27296CD95C9FC10EF3BF785C5"
+  },
+  {
+    "Name": "run-gates2.ps1",
+    "Length": 1259,
+    "SHA256": "7F88B84DC50C2277745EE98A3741414D50522E57DD20335E286F3F3DAF2381E6"
+  },
+  {
+    "Name": "run-observation.json",
+    "Length": 320,
+    "SHA256": "09FDB885C5C7E50CA6B59C6270BB0B56CEFE04EDE4B9EAC5A1906C406343CA9C"
+  }
+]
@@ -0,0 +1,14 @@
+{
+  "checked_utc": "2026-09-11T13:39:00.9966556Z",
+  "process_names": [
+    "cargo.exe",
+    "rustc.exe",
+    "clippy-driver.exe",
+    "clang.exe",
+    "ld.lld.exe",
+    "lld-link.exe"
+  ],
+  "remaining": [],
+  "owned_processes_remaining": false,
+  "forced_stop_process_used": false
+}
@@ -0,0 +1,21 @@
+$ErrorActionPreference = 'Stop'
+. ./.local/toolchain/env.ps1
+$env:CARGO_BUILD_JOBS = '1'
+$evidenceRoot = Join-Path (Get-Location) '.local/contextual-source-layout-20260911'
+$gates = @(
+    @{name='focused1'; args=@('test','--locked','-p','oa-desktop','--bin','arcadia-studio','contextual_source','--','--test-threads=1')},
+    @{name='clippy1'; args=@('clippy','--locked','-p','oa-desktop','--all-targets','--','-D','warnings')},
+    @{name='fmt1'; args=@('fmt','--all','--','--check')},
+    @{name='gui1'; args=@('build','--locked','-p','oa-desktop','--bin','arcadia-studio')}
+)
+foreach ($gate in $gates) {
+    $logPath = Join-Path $evidenceRoot ($gate.name + '.log')
+    $statusPath = Join-Path $evidenceRoot ($gate.name + '-status.json')
+    if ((Test-Path -LiteralPath $logPath) -or (Test-Path -LiteralPath $statusPath)) { throw "Refusing to overwrite $($gate.name)" }
+    $started = [DateTime]::UtcNow.ToString('o')
+    $gateArgs = $gate.args
+    & cargo @gateArgs 2>&1 | Tee-Object -FilePath $logPath
+    $gateExit = $LASTEXITCODE
+    [ordered]@{started=$started;finished=[DateTime]::UtcNow.ToString('o');exitCode=$gateExit;args=$gateArgs} | ConvertTo-Json -Depth 4 | Set-Content -LiteralPath $statusPath
+    if ($gateExit -ne 0) { exit $gateExit }
+}
@@ -0,0 +1,22 @@
+$ErrorActionPreference = 'Stop'
+. ./.local/toolchain/env.ps1
+$env:CARGO_BUILD_JOBS = '1'
+$evidenceRoot = Join-Path (Get-Location) '.local/contextual-source-layout-20260911'
+$gates = @(
+    @{name='focused2'; args=@('test','--locked','-p','oa-desktop','--bin','arcadia-studio','contextual_source','--','--test-threads=1')},
+    @{name='clippy1'; args=@('clippy','--locked','-p','oa-desktop','--all-targets','--','-D','warnings')},
+    @{name='fmt1'; args=@('fmt','--all','--','--check')},
+    @{name='gui1'; args=@('build','--locked','-p','oa-desktop','--bin','arcadia-studio')}
+)
+foreach ($gate in $gates) {
+    $logPath = Join-Path $evidenceRoot ($gate.name + '.log')
+    $statusPath = Join-Path $evidenceRoot ($gate.name + '-status.json')
+    if ((Test-Path -LiteralPath $logPath) -or (Test-Path -LiteralPath $statusPath)) { throw "Refusing to overwrite $($gate.name)" }
+    $started = [DateTime]::UtcNow.ToString('o')
+    $gateArgs = $gate.args
+    & cargo @gateArgs 2>&1 | Tee-Object -FilePath $logPath
+    $gateExit = $LASTEXITCODE
+    [ordered]@{started=$started;finished=[DateTime]::UtcNow.ToString('o');exitCode=$gateExit;args=$gateArgs} | ConvertTo-Json -Depth 4 | Set-Content -LiteralPath $statusPath
+    if ($gateExit -ne 0) { exit $gateExit }
+}
+
@@ -0,0 +1,8 @@
+{
+  "observed_utc": "2026-09-11T13:39:00.9966556Z",
+  "state": "stopped for user reboot",
+  "source_inputs": "inputs3.json",
+  "terminal_record": "focused2-interrupted.json",
+  "next": "Fresh focused gate name required after reboot; existing logs must not be overwritten",
+  "owned_processes_remaining": false
+}
@@ -0,0 +1,32 @@
+# Contextual source native evidence — reboot checkpoint, 2026-09-11
+
+Exact preservation of root's closed 52DE82 trial, through Machine Create and one Undo.
+Machine Redo and final reopen remain pending. No recovery, corrected layout, Linux
+or full product acceptance is claimed. See ../../release-contextual-source-native-20260911.md
+for root's observed workflow and ../../release-staged-source-authoring-oracle-20260911.md
+for the predetermined evaluator. This preservation does not rerun acceptance.
+
+`manifest.json` maps every original physical checkpoint file to `source-bytes/`.
+Identical source bytes are stored once by SHA256; reconstruct a checkpoint by
+copying each matching original-path suffix to its normal relative filename.
+The inventory includes retained detached files; it does not assume every physical
+file is reachable. No mutable `work`, private profile, executable or DLL is copied.
+`SHA256SUMS.txt` covers each unique preserved payload once.
+
+Screenshots, original command results, logs, launch record and corrected checker
+wrapper retain exact bytes. The initial loader exit -1073741515 with no output is
+recorded separately; the corrected wrapper scopes PATH to verified native bin and
+Windows and records exits. This is an environment correction, not a failed
+semantic oracle reclassified as a pass. OA Use followed by Save adopts the valid
+parent atomically; it is not a staged-only disk checkpoint. SA Chain uses direct
+Create. Missing-name clipping and staged-owner false-missing screenshots describe
+52DE82 before the later display fixes.
+
+Original compiler/input provenance, failed build attempts and oracle self-check
+logs are already in ../contextual-source-20260911/. The manifest binds that full
+inventory and this script validates all of its entries without duplicate copies.
+The original oracle source and base fixture remain linked and hash-bound.
+
+Preservation script was prepared privately, then run after root froze Machine Undo
+and stopped native input for reboot. Original/destination byte equality is checked.
+No GUI, Cargo, compiler, Git, credential access or live model snapshot was used.
@@ -0,0 +1,51 @@
+bf62317cae4d874235acd116251abc574d49bb34395edc9db95c83deaf51e129  logs/chain-create.log
+bf62317cae4d874235acd116251abc574d49bb34395edc9db95c83deaf51e129  logs/chain-redo.log
+b4d4cf18d0165a5d4279fbd87622e21ec45b1ec91036b81d349abd1fa41d218c  logs/chain-undo.log
+47c022288ea16539b839a4631283bd4e4b1653710bf7f7e5bd6bde1277aec207  logs/chain-use-disk-not-adopted.log
+47c022288ea16539b839a4631283bd4e4b1653710bf7f7e5bd6bde1277aec207  logs/lifeline-redo.log
+47c022288ea16539b839a4631283bd4e4b1653710bf7f7e5bd6bde1277aec207  logs/lifeline-save-adoption.log
+de987e795c696eec8d606e792dc1270594094d31c067a9376c5058cd2e53f78e  logs/lifeline-undo.log
+b5e3dae37828ccdc4c2214ba5b4770e32882620e99c6831dfd106cb0bf1a05e3  logs/machine-create.log
+bf62317cae4d874235acd116251abc574d49bb34395edc9db95c83deaf51e129  logs/machine-owner-back-disk-unchanged.log
+eb727987c59bbba1139af7c392ff709a96d333ae8eb9191ca77d0c1a0eba2ee9  logs/machine-undo.log
+bf62317cae4d874235acd116251abc574d49bb34395edc9db95c83deaf51e129  logs/machine-use-disk-not-adopted.log
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  logs/stderr.log
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  logs/stdout.log
+d9fa9b875eaeb2ffb828d6b6ba0c66b9d0283ca8efdf346b9bc691ff217d9eae  method/check-staged-source-v1.ps1
+cebfd54faa9fe8b18c9dbac03193ffe3631b9deecff32ee1714795efe46f1827  method/launch-contextual-source-v1.ps1
+bcb9277b88ab801c98d7aca93082585dac6e3645bdef1e582cee4f3285164f27  preserve.py
+f9191c1a0e5ee6ec0fa38f97b37b65500d6bf53ee610a74b2c57560bbf561998  provenance/chain-create-result.json
+a7d6d4cf27b7273f6939a92845bb22397a8095e9f64971ff72e31df359b58914  provenance/chain-redo-result.json
+d95262cdaa40e66323eec0ca234d95b70e8fa5b63dc937184bd3cb206604e512  provenance/chain-undo-result.json
+e5c4fc288ca7b868b3cf314da17b26c73176622dfa5b0c7272a4d15a0d721ee5  provenance/chain-use-disk-not-adopted-result.json
+120ebbd52f262f58e0c0452c488598818547979683b9009677ee3142f09c4bd7  provenance/launch.json
+055658547350e039c302cd1d542191cfdfdb31c587184db4e9f10db6444ccf53  provenance/lifeline-redo-result.json
+671b2b7966168cb25ec0287708600f8067dd55057eec5251f38ae6374e08afe2  provenance/lifeline-save-adoption-result.json
+fbd2e945a1c3acae22aec7ea20f8e4dc5727c16e0a898f5775bffbdc69cb4fe5  provenance/lifeline-undo-result.json
+793ab1129d5d83c1355ce74effe583ce22f1a5585c4a58fa6ef619da526088ae  provenance/machine-create-result.json
+fa958bc7b911278cfcfc0cf7cd7d0c2aa2f41e999fb3ff5562ebd59358d1ee0d  provenance/machine-owner-back-disk-unchanged-result.json
+35e240144e904a3d826a06c7724ba511ee9de1b84f9e2124cf75482b3d336da6  provenance/machine-undo-result.json
+ae15d0f7d3577ffc70dc8e42d086cc4ba275e57a9c3744e687bfce90515b0d02  provenance/machine-use-disk-not-adopted-result.json
+d99a727ed72d6153812b8fef9dc37f7fa1c0857e738a5405fba8f74a91bcc079  provenance/oracle-runtime-initial-failure.json
+bfdd4abd1279750ec8fcb22473aa483e7fa0e9d9f284483069bfe7669a976214  screenshots/oa-empty-first-action.png
+c303d71d27a5080ffbd006833f879830c4aef7daa9b540197297d544f019a85c  screenshots/oa-lifeline-redo-saved.png
+e59f32d493fe1c46981ed74e85fa622c0eaafe01ce33aa04da9e5a4bbce9fb7d  screenshots/oa-source-open-clipped-name.png
+43d32d9b554391e62961afa523ba5c45bca8c8c6ae95b54a5236d4e5827ecca7  screenshots/oa-source-ready.png
+2b6ded38b42262b82cb4b19b19b246d7dc4c13d306495806fb735312804a29ec  screenshots/sa-chain-redo-saved.png
+76db8ec4d2d83f3f5433fcd2892482ec623f0f865f30fb8242d9bcf6612c729d  screenshots/sa-contribution-retained.png
+765e053870196fd7fa5a2a776af100544e524e4783380d4c547808f553d7a01e  screenshots/sa-empty-first-action.png
+e80f97c931f64c7fe73ef9bafa42ffd9d7aa46c2549bcc05ca7879a0c0a8837f  screenshots/sa-machine-created-saved.png
+ebbef5afbb3f6352a0ceb8d6bee069d2dcc914eca91f92c995ae730ca862fbec  screenshots/sa-machine-owner-before-escape.png
+733cf95c8e070ab527a4e4b5aa5858ed6475bba69dd358e6f47401887791028a  screenshots/sa-machine-ready.png
+f14f58ad61b9771a1ec9abc64c05bf6dc124027a38881858aec9b3e76d49c5df  screenshots/sa-machine-staged-false-missing.png
+41937597174fadd9d0f4c55defb1efefa75259b3d4e70931bbcf943d8df85d1e  screenshots/sa-machine-undo-saved-before-reboot.png
+6a891cee112092bdadd3534c3ae267cce92fa00dd102686d3482d130b7a434e2  screenshots/sa-source-ready.png
+6a2af2ed905d353970f7784160aeb38e929d742358a26c096b44fb6737e8605b  source-bytes/6a2af2ed905d353970f7784160aeb38e929d742358a26c096b44fb6737e8605b.arcadia
+7dbe69894738f5760bb22a8a6ddb8b664474ee1d8a3f9856126697c51b54bc5b  source-bytes/7dbe69894738f5760bb22a8a6ddb8b664474ee1d8a3f9856126697c51b54bc5b.arcadia
+a6c9c553effe4b7a8ff7f6db2c475533e5157ba5ed28e6f66bdba435bab2163f  source-bytes/a6c9c553effe4b7a8ff7f6db2c475533e5157ba5ed28e6f66bdba435bab2163f.arcadia
+a9925cd175b6b963b8f406426b8fd6a95a54f802d74236ef5afa46664dbcbcbb  source-bytes/a9925cd175b6b963b8f406426b8fd6a95a54f802d74236ef5afa46664dbcbcbb.arcadia
+aa844950ec4fb86f262a257e1fc370a26557ea7978d8a4cab78265037660234c  source-bytes/aa844950ec4fb86f262a257e1fc370a26557ea7978d8a4cab78265037660234c.arcadia
+ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd  source-bytes/ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd.arcadia
+ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6  source-bytes/ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6.arcadia
+bd795b6fcb7dbf581bbce083d1a4ccabff7852975b859ea55f27ec1d99ab9e7b  source-bytes/bd795b6fcb7dbf581bbce083d1a4ccabff7852975b859ea55f27ec1d99ab9e7b.arcadia
+e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd  source-bytes/e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd.arcadia
@@ -0,0 +1 @@
+PASS Chain: complete Project + 4 exact source/disk files, original role UUIDs
@@ -0,0 +1 @@
+PASS Chain: complete Project + 4 exact source/disk files, original role UUIDs
@@ -0,0 +1 @@
+PASS exact model/identity/3 reachable sources; 4 exact disk files (1 proven retained)
@@ -0,0 +1 @@
+PASS Lifeline: complete Project + 3 exact source/disk files, original role UUIDs
@@ -0,0 +1 @@
+PASS Lifeline: complete Project + 3 exact source/disk files, original role UUIDs
@@ -0,0 +1 @@
+PASS Lifeline: complete Project + 3 exact source/disk files, original role UUIDs
@@ -0,0 +1 @@
+PASS exact model/identity/2 reachable sources; 3 exact disk files (1 proven retained)
@@ -0,0 +1 @@
+PASS Machine: complete Project + 6 exact source/disk files, original role UUIDs
@@ -0,0 +1 @@
+PASS Chain: complete Project + 4 exact source/disk files, original role UUIDs
@@ -0,0 +1 @@
+PASS exact model/identity/4 reachable sources; 6 exact disk files (2 proven retained)
@@ -0,0 +1 @@
+PASS Chain: complete Project + 4 exact source/disk files, original role UUIDs
@@ -0,0 +1,518 @@
+{
+  "format_version": 1,
+  "scope": "Reboot checkpoint: OA Lifeline Save-adoption Create/Undo/Redo; SA Chain direct Create/Undo/Redo; SA Machine direct Create and Undo only. Machine Redo/reopen, recovery and corrected layout acceptance remain pending.",
+  "original_directory": ".local/native-qa/contextual-source-20260911-v1",
+  "frozen_directories": [
+    "baseline",
+    "checkpoint-lifeline",
+    "checkpoint-lifeline-undo",
+    "checkpoint-lifeline-redo",
+    "checkpoint-chain",
+    "checkpoint-chain-undo",
+    "checkpoint-chain-redo",
+    "checkpoint-machine",
+    "checkpoint-machine-undo"
+  ],
+  "excluded": [
+    "work/",
+    "profile/",
+    "bin/",
+    "uncreated machine Redo and reopen checkpoints"
+  ],
+  "method": "Exact byte readback, no oracle execution or mutable workspace reads. Content-addressed source files deduplicate only byte-identical physical files; records map every original path to its preserved bytes, including known detached files.",
+  "gui_sha256": "52de82e434b636e18db02d381842aa6db84b721cffd5502063f784f37246acce",
+  "oracle_sha256": "967d9ba3c6fb3a7efb410833903ec94556ca2d48a67d5072c8bb160f40a00f9c",
+  "records": [
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/baseline/notes.arcadia",
+      "path": "source-bytes/ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd.arcadia",
+      "bytes": 63,
+      "sha256": "ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/baseline/project.arcadia",
+      "path": "source-bytes/aa844950ec4fb86f262a257e1fc370a26557ea7978d8a4cab78265037660234c.arcadia",
+      "bytes": 593,
+      "sha256": "aa844950ec4fb86f262a257e1fc370a26557ea7978d8a4cab78265037660234c"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-lifeline/notes.arcadia",
+      "path": "source-bytes/ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd.arcadia",
+      "bytes": 63,
+      "sha256": "ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-lifeline/oa/activities/activity_assess_incident_work.arcadia",
+      "path": "source-bytes/e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd.arcadia",
+      "bytes": 142,
+      "sha256": "e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-lifeline/project.arcadia",
+      "path": "source-bytes/6a2af2ed905d353970f7784160aeb38e929d742358a26c096b44fb6737e8605b.arcadia",
+      "bytes": 860,
+      "sha256": "6a2af2ed905d353970f7784160aeb38e929d742358a26c096b44fb6737e8605b"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-lifeline-undo/notes.arcadia",
+      "path": "source-bytes/ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd.arcadia",
+      "bytes": 63,
+      "sha256": "ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-lifeline-undo/oa/activities/activity_assess_incident_work.arcadia",
+      "path": "source-bytes/e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd.arcadia",
+      "bytes": 142,
+      "sha256": "e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-lifeline-undo/project.arcadia",
+      "path": "source-bytes/aa844950ec4fb86f262a257e1fc370a26557ea7978d8a4cab78265037660234c.arcadia",
+      "bytes": 593,
+      "sha256": "aa844950ec4fb86f262a257e1fc370a26557ea7978d8a4cab78265037660234c"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-lifeline-redo/notes.arcadia",
+      "path": "source-bytes/ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd.arcadia",
+      "bytes": 63,
+      "sha256": "ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-lifeline-redo/oa/activities/activity_assess_incident_work.arcadia",
+      "path": "source-bytes/e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd.arcadia",
+      "bytes": 142,
+      "sha256": "e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-lifeline-redo/project.arcadia",
+      "path": "source-bytes/6a2af2ed905d353970f7784160aeb38e929d742358a26c096b44fb6737e8605b.arcadia",
+      "bytes": 860,
+      "sha256": "6a2af2ed905d353970f7784160aeb38e929d742358a26c096b44fb6737e8605b"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain/notes.arcadia",
+      "path": "source-bytes/ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd.arcadia",
+      "bytes": 63,
+      "sha256": "ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain/oa/activities/activity_assess_incident_work.arcadia",
+      "path": "source-bytes/e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd.arcadia",
+      "bytes": 142,
+      "sha256": "e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain/project.arcadia",
+      "path": "source-bytes/bd795b6fcb7dbf581bbce083d1a4ccabff7852975b859ea55f27ec1d99ab9e7b.arcadia",
+      "bytes": 1322,
+      "sha256": "bd795b6fcb7dbf581bbce083d1a4ccabff7852975b859ea55f27ec1d99ab9e7b"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain/sa/functions/function_classify_request.arcadia",
+      "path": "source-bytes/ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6.arcadia",
+      "bytes": 134,
+      "sha256": "ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain-undo/notes.arcadia",
+      "path": "source-bytes/ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd.arcadia",
+      "bytes": 63,
+      "sha256": "ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain-undo/oa/activities/activity_assess_incident_work.arcadia",
+      "path": "source-bytes/e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd.arcadia",
+      "bytes": 142,
+      "sha256": "e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain-undo/project.arcadia",
+      "path": "source-bytes/6a2af2ed905d353970f7784160aeb38e929d742358a26c096b44fb6737e8605b.arcadia",
+      "bytes": 860,
+      "sha256": "6a2af2ed905d353970f7784160aeb38e929d742358a26c096b44fb6737e8605b"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain-undo/sa/functions/function_classify_request.arcadia",
+      "path": "source-bytes/ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6.arcadia",
+      "bytes": 134,
+      "sha256": "ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain-redo/notes.arcadia",
+      "path": "source-bytes/ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd.arcadia",
+      "bytes": 63,
+      "sha256": "ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain-redo/oa/activities/activity_assess_incident_work.arcadia",
+      "path": "source-bytes/e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd.arcadia",
+      "bytes": 142,
+      "sha256": "e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain-redo/project.arcadia",
+      "path": "source-bytes/bd795b6fcb7dbf581bbce083d1a4ccabff7852975b859ea55f27ec1d99ab9e7b.arcadia",
+      "bytes": 1322,
+      "sha256": "bd795b6fcb7dbf581bbce083d1a4ccabff7852975b859ea55f27ec1d99ab9e7b"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-chain-redo/sa/functions/function_classify_request.arcadia",
+      "path": "source-bytes/ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6.arcadia",
+      "bytes": 134,
+      "sha256": "ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine/notes.arcadia",
+      "path": "source-bytes/ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd.arcadia",
+      "bytes": 63,
+      "sha256": "ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine/oa/activities/activity_assess_incident_work.arcadia",
+      "path": "source-bytes/e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd.arcadia",
+      "bytes": 142,
+      "sha256": "e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine/project.arcadia",
+      "path": "source-bytes/a9925cd175b6b963b8f406426b8fd6a95a54f802d74236ef5afa46664dbcbcbb.arcadia",
+      "bytes": 1433,
+      "sha256": "a9925cd175b6b963b8f406426b8fd6a95a54f802d74236ef5afa46664dbcbcbb"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine/sa/functions/function_classify_request.arcadia",
+      "path": "source-bytes/ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6.arcadia",
+      "bytes": 134,
+      "sha256": "ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine/sa/participants.arcadia",
+      "path": "source-bytes/7dbe69894738f5760bb22a8a6ddb8b664474ee1d8a3f9856126697c51b54bc5b.arcadia",
+      "bytes": 292,
+      "sha256": "7dbe69894738f5760bb22a8a6ddb8b664474ee1d8a3f9856126697c51b54bc5b"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine/views/diagram_field_team_operating_modes_states.arcadia",
+      "path": "source-bytes/a6c9c553effe4b7a8ff7f6db2c475533e5157ba5ed28e6f66bdba435bab2163f.arcadia",
+      "bytes": 836,
+      "sha256": "a6c9c553effe4b7a8ff7f6db2c475533e5157ba5ed28e6f66bdba435bab2163f"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine-undo/notes.arcadia",
+      "path": "source-bytes/ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd.arcadia",
+      "bytes": 63,
+      "sha256": "ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine-undo/oa/activities/activity_assess_incident_work.arcadia",
+      "path": "source-bytes/e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd.arcadia",
+      "bytes": 142,
+      "sha256": "e445c539a4de1962d0402eda6c4e1708944bf071c5cb28e1dcb844b8ae8b42bd"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine-undo/project.arcadia",
+      "path": "source-bytes/bd795b6fcb7dbf581bbce083d1a4ccabff7852975b859ea55f27ec1d99ab9e7b.arcadia",
+      "bytes": 1322,
+      "sha256": "bd795b6fcb7dbf581bbce083d1a4ccabff7852975b859ea55f27ec1d99ab9e7b"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine-undo/sa/functions/function_classify_request.arcadia",
+      "path": "source-bytes/ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6.arcadia",
+      "bytes": 134,
+      "sha256": "ba4f9e7d8358aa33494edebdcdbaf8d19beb944b4b6d9b12b3437c9296eee4d6"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine-undo/sa/participants.arcadia",
+      "path": "source-bytes/7dbe69894738f5760bb22a8a6ddb8b664474ee1d8a3f9856126697c51b54bc5b.arcadia",
+      "bytes": 292,
+      "sha256": "7dbe69894738f5760bb22a8a6ddb8b664474ee1d8a3f9856126697c51b54bc5b"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/checkpoint-machine-undo/views/diagram_field_team_operating_modes_states.arcadia",
+      "path": "source-bytes/a6c9c553effe4b7a8ff7f6db2c475533e5157ba5ed28e6f66bdba435bab2163f.arcadia",
+      "bytes": 836,
+      "sha256": "a6c9c553effe4b7a8ff7f6db2c475533e5157ba5ed28e6f66bdba435bab2163f"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/chain-create-result.json",
+      "path": "provenance/chain-create-result.json",
+      "bytes": 835,
+      "sha256": "f9191c1a0e5ee6ec0fa38f97b37b65500d6bf53ee610a74b2c57560bbf561998"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/chain-create.log",
+      "path": "logs/chain-create.log",
+      "bytes": 79,
+      "sha256": "bf62317cae4d874235acd116251abc574d49bb34395edc9db95c83deaf51e129"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/chain-redo-result.json",
+      "path": "provenance/chain-redo-result.json",
+      "bytes": 823,
+      "sha256": "a7d6d4cf27b7273f6939a92845bb22397a8095e9f64971ff72e31df359b58914"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/chain-redo.log",
+      "path": "logs/chain-redo.log",
+      "bytes": 79,
+      "sha256": "bf62317cae4d874235acd116251abc574d49bb34395edc9db95c83deaf51e129"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/chain-undo-result.json",
+      "path": "provenance/chain-undo-result.json",
+      "bytes": 685,
+      "sha256": "d95262cdaa40e66323eec0ca234d95b70e8fa5b63dc937184bd3cb206604e512"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/chain-undo.log",
+      "path": "logs/chain-undo.log",
+      "bytes": 87,
+      "sha256": "b4d4cf18d0165a5d4279fbd87622e21ec45b1ec91036b81d349abd1fa41d218c"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/chain-use-disk-not-adopted-result.json",
+      "path": "provenance/chain-use-disk-not-adopted-result.json",
+      "bytes": 685,
+      "sha256": "e5c4fc288ca7b868b3cf314da17b26c73176622dfa5b0c7272a4d15a0d721ee5"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/chain-use-disk-not-adopted.log",
+      "path": "logs/chain-use-disk-not-adopted.log",
+      "bytes": 82,
+      "sha256": "47c022288ea16539b839a4631283bd4e4b1653710bf7f7e5bd6bde1277aec207"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/launch.json",
+      "path": "provenance/launch.json",
+      "bytes": 1600,
+      "sha256": "120ebbd52f262f58e0c0452c488598818547979683b9009677ee3142f09c4bd7"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/lifeline-redo-result.json",
+      "path": "provenance/lifeline-redo-result.json",
+      "bytes": 685,
+      "sha256": "055658547350e039c302cd1d542191cfdfdb31c587184db4e9f10db6444ccf53"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/lifeline-redo.log",
+      "path": "logs/lifeline-redo.log",
+      "bytes": 82,
+      "sha256": "47c022288ea16539b839a4631283bd4e4b1653710bf7f7e5bd6bde1277aec207"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/lifeline-save-adoption-result.json",
+      "path": "provenance/lifeline-save-adoption-result.json",
+      "bytes": 700,
+      "sha256": "671b2b7966168cb25ec0287708600f8067dd55057eec5251f38ae6374e08afe2"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/lifeline-save-adoption.log",
+      "path": "logs/lifeline-save-adoption.log",
+      "bytes": 82,
+      "sha256": "47c022288ea16539b839a4631283bd4e4b1653710bf7f7e5bd6bde1277aec207"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/lifeline-undo-result.json",
+      "path": "provenance/lifeline-undo-result.json",
+      "bytes": 677,
+      "sha256": "fbd2e945a1c3acae22aec7ea20f8e4dc5727c16e0a898f5775bffbdc69cb4fe5"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/lifeline-undo.log",
+      "path": "logs/lifeline-undo.log",
+      "bytes": 87,
+      "sha256": "de987e795c696eec8d606e792dc1270594094d31c067a9376c5058cd2e53f78e"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/machine-create-result.json",
+      "path": "provenance/machine-create-result.json",
+      "bytes": 982,
+      "sha256": "793ab1129d5d83c1355ce74effe583ce22f1a5585c4a58fa6ef619da526088ae"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/machine-create.log",
+      "path": "logs/machine-create.log",
+      "bytes": 81,
+      "sha256": "b5e3dae37828ccdc4c2214ba5b4770e32882620e99c6831dfd106cb0bf1a05e3"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/machine-owner-back-disk-unchanged-result.json",
+      "path": "provenance/machine-owner-back-disk-unchanged-result.json",
+      "bytes": 823,
+      "sha256": "fa958bc7b911278cfcfc0cf7cd7d0c2aa2f41e999fb3ff5562ebd59358d1ee0d"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/machine-owner-back-disk-unchanged.log",
+      "path": "logs/machine-owner-back-disk-unchanged.log",
+      "bytes": 79,
+      "sha256": "bf62317cae4d874235acd116251abc574d49bb34395edc9db95c83deaf51e129"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/machine-undo-result.json",
+      "path": "provenance/machine-undo-result.json",
+      "bytes": 684,
+      "sha256": "35e240144e904a3d826a06c7724ba511ee9de1b84f9e2124cf75482b3d336da6"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/machine-undo.log",
+      "path": "logs/machine-undo.log",
+      "bytes": 87,
+      "sha256": "eb727987c59bbba1139af7c392ff709a96d333ae8eb9191ca77d0c1a0eba2ee9"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/machine-use-disk-not-adopted-result.json",
+      "path": "provenance/machine-use-disk-not-adopted-result.json",
+      "bytes": 823,
+      "sha256": "ae15d0f7d3577ffc70dc8e42d086cc4ba275e57a9c3744e687bfce90515b0d02"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/machine-use-disk-not-adopted.log",
+      "path": "logs/machine-use-disk-not-adopted.log",
+      "bytes": 79,
+      "sha256": "bf62317cae4d874235acd116251abc574d49bb34395edc9db95c83deaf51e129"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/oa-empty-first-action.png",
+      "path": "screenshots/oa-empty-first-action.png",
+      "bytes": 85886,
+      "sha256": "bfdd4abd1279750ec8fcb22473aa483e7fa0e9d9f284483069bfe7669a976214"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/oa-lifeline-redo-saved.png",
+      "path": "screenshots/oa-lifeline-redo-saved.png",
+      "bytes": 91138,
+      "sha256": "c303d71d27a5080ffbd006833f879830c4aef7daa9b540197297d544f019a85c"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/oa-source-open-clipped-name.png",
+      "path": "screenshots/oa-source-open-clipped-name.png",
+      "bytes": 94195,
+      "sha256": "e59f32d493fe1c46981ed74e85fa622c0eaafe01ce33aa04da9e5a4bbce9fb7d"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/oa-source-ready.png",
+      "path": "screenshots/oa-source-ready.png",
+      "bytes": 94396,
+      "sha256": "43d32d9b554391e62961afa523ba5c45bca8c8c6ae95b54a5236d4e5827ecca7"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/oracle-runtime-initial-failure.json",
+      "path": "provenance/oracle-runtime-initial-failure.json",
+      "bytes": 255,
+      "sha256": "d99a727ed72d6153812b8fef9dc37f7fa1c0857e738a5405fba8f74a91bcc079"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/sa-chain-redo-saved.png",
+      "path": "screenshots/sa-chain-redo-saved.png",
+      "bytes": 85097,
+      "sha256": "2b6ded38b42262b82cb4b19b19b246d7dc4c13d306495806fb735312804a29ec"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/sa-contribution-retained.png",
+      "path": "screenshots/sa-contribution-retained.png",
+      "bytes": 95984,
+      "sha256": "76db8ec4d2d83f3f5433fcd2892482ec623f0f865f30fb8242d9bcf6612c729d"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/sa-empty-first-action.png",
+      "path": "screenshots/sa-empty-first-action.png",
+      "bytes": 83136,
+      "sha256": "765e053870196fd7fa5a2a776af100544e524e4783380d4c547808f553d7a01e"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/sa-machine-created-saved.png",
+      "path": "screenshots/sa-machine-created-saved.png",
+      "bytes": 99160,
+      "sha256": "e80f97c931f64c7fe73ef9bafa42ffd9d7aa46c2549bcc05ca7879a0c0a8837f"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/sa-machine-owner-before-escape.png",
+      "path": "screenshots/sa-machine-owner-before-escape.png",
+      "bytes": 93282,
+      "sha256": "ebbef5afbb3f6352a0ceb8d6bee069d2dcc914eca91f92c995ae730ca862fbec"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/sa-machine-ready.png",
+      "path": "screenshots/sa-machine-ready.png",
+      "bytes": 103564,
+      "sha256": "733cf95c8e070ab527a4e4b5aa5858ed6475bba69dd358e6f47401887791028a"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/sa-machine-staged-false-missing.png",
+      "path": "screenshots/sa-machine-staged-false-missing.png",
+      "bytes": 103538,
+      "sha256": "f14f58ad61b9771a1ec9abc64c05bf6dc124027a38881858aec9b3e76d49c5df"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/sa-machine-undo-saved-before-reboot.png",
+      "path": "screenshots/sa-machine-undo-saved-before-reboot.png",
+      "bytes": 84979,
+      "sha256": "41937597174fadd9d0f4c55defb1efefa75259b3d4e70931bbcf943d8df85d1e"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/sa-source-ready.png",
+      "path": "screenshots/sa-source-ready.png",
+      "bytes": 96379,
+      "sha256": "6a891cee112092bdadd3534c3ae267cce92fa00dd102686d3482d130b7a434e2"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/stderr.log",
+      "path": "logs/stderr.log",
+      "bytes": 0,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "original_path": ".local/native-qa/contextual-source-20260911-v1/stdout.log",
+      "path": "logs/stdout.log",
+      "bytes": 0,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "original_path": ".local/native-qa/launch-contextual-source-v1.ps1",
+      "path": "method/launch-contextual-source-v1.ps1",
+      "bytes": 2686,
+      "sha256": "cebfd54faa9fe8b18c9dbac03193ffe3631b9deecff32ee1714795efe46f1827"
+    },
+    {
+      "original_path": ".local/native-qa/check-staged-source-v1.ps1",
+      "path": "method/check-staged-source-v1.ps1",
+      "bytes": 1671,
+      "sha256": "d9fa9b875eaeb2ffb828d6b6ba0c66b9d0283ca8efdf346b9bc691ff217d9eae"
+    },
+    {
+      "original_path": ".local/contextual-source-preservation-20260911/preserve.py",
+      "path": "preserve.py",
+      "bytes": 7189,
+      "sha256": "bcb9277b88ab801c98d7aca93082585dac6e3645bdef1e582cee4f3285164f27"
+    }
+  ],
+  "references": [
+    {
+      "path": "harness/experiments/contextual-source-20260911/inventory.json",
+      "bytes": 9701,
+      "sha256": "e7267296d0f21b1db1a3d28dc3a1f016596f005e8660c82f09d176ffa047ffd1"
+    },
+    {
+      "path": "harness/staged-source-authoring-contract.rs",
+      "bytes": 22693,
+      "sha256": "9eb9dd3868b6cb772f907d16ae02995ad10a16f85c087012c24948e6e6fe775d"
+    },
+    {
+      "path": "harness/fixtures/staged-source-authoring/base/project.arcadia",
+      "bytes": 593,
+      "sha256": "aa844950ec4fb86f262a257e1fc370a26557ea7978d8a4cab78265037660234c"
+    },
+    {
+      "path": "harness/fixtures/staged-source-authoring/base/notes.arcadia",
+      "bytes": 63,
+      "sha256": "ad9de02963c20d1f43856455a797deb05ca674659e45f2c4b96b52783024f8bd"
+    }
+  ],
+  "counts": {
+    "original_records": 77,
+    "unique_payload_files": 51,
+    "unique_payload_bytes": 1239116,
+    "physical_source_files": 35,
+    "unique_source_files": 9
+  }
+}
@@ -0,0 +1,21 @@
+param([Parameter(Mandatory=$true)][string]$Mode,[string]$Observed='work',[string[]]$Carriers=@(),[switch]$Same,[string]$LogName='')
+$ErrorActionPreference='Stop'
+$trialRepo='C:\Users\User\Documents\Git\ARCADIA-Studio'
+$trialRoot=Join-Path $trialRepo '.local/native-qa/contextual-source-20260911-v1'
+$oracle=Join-Path $trialRepo '.local/staged-source-oracle-20260911/staged-source-authoring-contract.exe'
+if((Get-FileHash -LiteralPath $oracle -Algorithm SHA256).Hash -ne '967D9BA3C6FB3A7EFB410833903EC94556CA2D48A67D5072C8BB160F40A00F9C') { throw 'Oracle changed' }
+$base=Join-Path $trialRepo 'harness/fixtures/staged-source-authoring/base/project.arcadia'
+$observedEntry=Join-Path $trialRoot "$Observed/project.arcadia"
+$argsList=@('check',$Mode,$base,$observedEntry)
+foreach($carrier in $Carriers) { $argsList += Join-Path $trialRoot "$carrier/project.arcadia" }
+if($Same) { $argsList=@('same') + @($Carriers | ForEach-Object { Join-Path $trialRoot "$_/project.arcadia" }) }
+$oldRuntimePath=$env:PATH
+if(-not $LogName) { $LogName=$Mode }
+if(Test-Path -LiteralPath "$trialRoot/$LogName-result.json") { throw 'Refuse to overwrite an earlier oracle result' }
+try {
+  $env:PATH="$trialRoot/bin;$env:SystemRoot\System32;$env:SystemRoot"
+  & $oracle @argsList 2>&1 | Tee-Object -FilePath "$trialRoot/$LogName.log"
+  $oracleExit=$LASTEXITCODE
+  [pscustomobject]@{finishedUtc=[DateTimeOffset]::UtcNow.ToString('o');exitCode=$oracleExit;arguments=$argsList;runtimePath=$env:PATH} | ConvertTo-Json -Depth 4 | Set-Content -LiteralPath "$trialRoot/$LogName-result.json"
+  if($oracleExit -ne 0) { throw "Oracle failed with exit $oracleExit" }
+} finally { $env:PATH=$oldRuntimePath }
@@ -0,0 +1,32 @@
+$ErrorActionPreference = 'Stop'
+$stageRepo = 'C:\Users\User\Documents\Git\ARCADIA-Studio'
+$stageRoot = Join-Path $stageRepo '.local/native-qa/contextual-source-20260911-v1'
+$stageInputs = Join-Path $stageRepo '.local/contextual-source-20260911'
+if (Test-Path -LiteralPath $stageRoot) { throw 'Native stage already exists.' }
+if (Get-Process -Name arcadia-studio -ErrorAction SilentlyContinue) { throw 'Another Studio process exists.' }
+$sourceManifest = Get-Content -Raw -LiteralPath (Join-Path $stageInputs 'focused5-inputs.json') | ConvertFrom-Json
+foreach ($entry in $sourceManifest.inputs) {
+  if ((Get-FileHash -Algorithm SHA256 -LiteralPath (Join-Path $stageRepo $entry.path)).Hash -ne $entry.sha256) { throw "Frozen input differs: $($entry.path)" }
+}
+$guiManifest = Get-Content -Raw -LiteralPath (Join-Path $stageInputs 'gui-verified/manifest.json') | ConvertFrom-Json
+foreach ($entry in $guiManifest.artifacts) {
+  if ((Get-FileHash -Algorithm SHA256 -LiteralPath (Join-Path $stageInputs "gui-verified/$($entry.file)")).Hash -ne $entry.sha256) { throw "GUI artifact differs: $($entry.file)" }
+}
+New-Item -ItemType Directory -Path "$stageRoot/bin", "$stageRoot/profile/local", "$stageRoot/profile/roaming" | Out-Null
+foreach ($entry in $guiManifest.artifacts) { Copy-Item -LiteralPath (Join-Path $stageInputs "gui-verified/$($entry.file)") -Destination "$stageRoot/bin" }
+Copy-Item -LiteralPath (Join-Path $stageRepo 'harness/fixtures/staged-source-authoring/base') -Destination "$stageRoot/work" -Recurse
+$originalPath = $env:PATH
+$originalAppData = $env:APPDATA
+$originalLocalAppData = $env:LOCALAPPDATA
+try {
+  $env:PATH = "$stageRoot/bin;$env:SystemRoot\System32;$env:SystemRoot"
+  $env:APPDATA = "$stageRoot/profile/roaming"
+  $env:LOCALAPPDATA = "$stageRoot/profile/local"
+  $guiProcess = Start-Process -FilePath "$stageRoot/bin/arcadia-studio.exe" -WorkingDirectory "$stageRoot/bin" -WindowStyle Hidden -PassThru -RedirectStandardOutput "$stageRoot/stdout.log" -RedirectStandardError "$stageRoot/stderr.log"
+  [pscustomobject]@{ pid=$guiProcess.Id; startedUtc=[DateTimeOffset]::UtcNow.ToString('o'); sourceManifest="$stageInputs/focused5-inputs.json"; artifacts=$guiManifest.artifacts; executable="$stageRoot/bin/arcadia-studio.exe"; appData=$env:APPDATA; localAppData=$env:LOCALAPPDATA; runtimePath=$env:PATH; baseline=(Get-ChildItem -LiteralPath "$stageRoot/work" -File | Get-FileHash -Algorithm SHA256 | Select-Object Path,Hash) } | ConvertTo-Json -Depth 6 | Set-Content -LiteralPath "$stageRoot/launch.json"
+  $guiProcess | Select-Object Id, ProcessName
+} finally {
+  $env:PATH=$originalPath
+  $env:APPDATA=$originalAppData
+  $env:LOCALAPPDATA=$originalLocalAppData
+}
@@ -0,0 +1,114 @@
+"""Preserve only the explicitly frozen native 52DE82 evidence; never read work/profile."""
+import hashlib
+import json
+from pathlib import Path
+
+repo = Path(__file__).resolve().parents[2]
+source = repo / '.local/native-qa/contextual-source-20260911-v1'
+dest = repo / 'harness/experiments/contextual-source-native-20260911'
+dest.mkdir(parents=True, exist_ok=True)
+def sha(data):
+    return hashlib.sha256(data).hexdigest()
+records = []
+def preserve(path, target):
+    data = path.read_bytes()
+    out = dest / target
+    out.parent.mkdir(parents=True, exist_ok=True)
+    if out.exists():
+        assert out.read_bytes() == data, target
+    else:
+        with out.open('xb') as stream:
+            stream.write(data)
+    assert path.read_bytes() == out.read_bytes() == data
+    records.append(dict(original_path=path.relative_to(repo).as_posix(), path=target,
+                        bytes=len(data), sha256=sha(data)))
+
+frozen = ['baseline', 'checkpoint-lifeline', 'checkpoint-lifeline-undo',
+          'checkpoint-lifeline-redo', 'checkpoint-chain', 'checkpoint-chain-undo',
+          'checkpoint-chain-redo', 'checkpoint-machine', 'checkpoint-machine-undo']
+for name in frozen:
+    directory = source / name
+    assert directory.is_dir(), name
+    files = sorted(p for p in directory.rglob('*') if p.is_file())
+    assert files and all(p.suffix == '.arcadia' for p in files), name
+    for path in files:
+        preserve(path, 'source-bytes/' + sha(path.read_bytes()) + '.arcadia')
+
+for path in sorted(source.iterdir()):
+    if path.is_file():
+        assert path.suffix in ('.json', '.log', '.png'), path.name
+        folder = 'screenshots' if path.suffix == '.png' else 'logs' if path.suffix == '.log' else 'provenance'
+        preserve(path, folder + '/' + path.name)
+for name in ('launch-contextual-source-v1.ps1', 'check-staged-source-v1.ps1'):
+    preserve(source.parent / name, 'method/' + name)
+preserve(Path(__file__).resolve(), 'preserve.py')
+
+# The original build, failed compile attempts and oracle self-checks are already
+# committed in this adjacent archive. Verify and bind them instead of duplicating.
+existing = repo / 'harness/experiments/contextual-source-20260911'
+inventory = existing / 'inventory.json'
+prior = json.loads(inventory.read_text(encoding='utf-8-sig'))
+for item in prior['files']:
+    data = (existing / item['path']).read_bytes()
+    assert len(data) == item['bytes'] and sha(data) == item['sha256'].lower(), item['path']
+references = []
+for path in (inventory, repo / 'harness/staged-source-authoring-contract.rs',
+             repo / 'harness/fixtures/staged-source-authoring/base/project.arcadia',
+             repo / 'harness/fixtures/staged-source-authoring/base/notes.arcadia'):
+    data = path.read_bytes()
+    references.append(dict(path=path.relative_to(repo).as_posix(), bytes=len(data), sha256=sha(data)))
+unique = {item['path']: item for item in records}
+manifest = dict(format_version=1,
+    scope='Reboot checkpoint: OA Lifeline Save-adoption Create/Undo/Redo; SA Chain direct Create/Undo/Redo; SA Machine direct Create and Undo only. Machine Redo/reopen, recovery and corrected layout acceptance remain pending.',
+    original_directory=source.relative_to(repo).as_posix(), frozen_directories=frozen,
+    excluded=['work/', 'profile/', 'bin/', 'uncreated machine Redo and reopen checkpoints'],
+    method='Exact byte readback, no oracle execution or mutable workspace reads. Content-addressed source files deduplicate only byte-identical physical files; records map every original path to its preserved bytes, including known detached files.',
+    gui_sha256='52de82e434b636e18db02d381842aa6db84b721cffd5502063f784f37246acce',
+    oracle_sha256='967d9ba3c6fb3a7eefb410833903ec94556ca2d48a67d5072c8bb160f40a00f9c',
+    records=records, references=references,
+    counts=dict(original_records=len(records), unique_payload_files=len(unique),
+                unique_payload_bytes=sum(r['bytes'] for r in unique.values()),
+                physical_source_files=sum(r['path'].startswith('source-bytes/') for r in records),
+                unique_source_files=sum(p.startswith('source-bytes/') for p in unique)))
+# Correct the literal oracle identity from the already measured manifest.
+oracle_manifest = json.loads((existing / 'oracle-preparation/manifest.json').read_text(encoding='utf-8-sig'))
+manifest['oracle_sha256'] = next(a['SHA256'].lower() for a in oracle_manifest['Artifacts'] if a['Path'].endswith('.exe'))
+readme = '''# Contextual source native evidence — reboot checkpoint, 2026-09-11
+
+Exact preservation of root's closed 52DE82 trial, through Machine Create and one Undo.
+Machine Redo and final reopen remain pending. No recovery, corrected layout, Linux
+or full product acceptance is claimed. See ../../release-contextual-source-native-20260911.md
+for root's observed workflow and ../../release-staged-source-authoring-oracle-20260911.md
+for the predetermined evaluator. This preservation does not rerun acceptance.
+
+`manifest.json` maps every original physical checkpoint file to `source-bytes/`.
+Identical source bytes are stored once by SHA256; reconstruct a checkpoint by
+copying each matching original-path suffix to its normal relative filename.
+The inventory includes retained detached files; it does not assume every physical
+file is reachable. No mutable `work`, private profile, executable or DLL is copied.
+`SHA256SUMS.txt` covers each unique preserved payload once.
+
+Screenshots, original command results, logs, launch record and corrected checker
+wrapper retain exact bytes. The initial loader exit -1073741515 with no output is
+recorded separately; the corrected wrapper scopes PATH to verified native bin and
+Windows and records exits. This is an environment correction, not a failed
+semantic oracle reclassified as a pass. OA Use followed by Save adopts the valid
+parent atomically; it is not a staged-only disk checkpoint. SA Chain uses direct
+Create. Missing-name clipping and staged-owner false-missing screenshots describe
+52DE82 before the later display fixes.
+
+Original compiler/input provenance, failed build attempts and oracle self-check
+logs are already in ../contextual-source-20260911/. The manifest binds that full
+inventory and this script validates all of its entries without duplicate copies.
+The original oracle source and base fixture remain linked and hash-bound.
+
+Preservation script was prepared privately, then run after root froze Machine Undo
+and stopped native input for reboot. Original/destination byte equality is checked.
+No GUI, Cargo, compiler, Git, credential access or live model snapshot was used.
+'''
+(dest / 'README.md').write_text(readme, encoding='utf-8', newline='\n')
+(dest / 'manifest.json').write_text(json.dumps(manifest, indent=2) + '\n', encoding='utf-8', newline='\n')
+(dest / 'SHA256SUMS.txt').write_text(''.join(f"{r['sha256']}  {p}\n" for p, r in sorted(unique.items())), encoding='utf-8', newline='\n')
+print(json.dumps(dict(status='PASS exact preservation', counts=manifest['counts'],
+                     manifest_sha256=sha((dest / 'manifest.json').read_bytes()),
+                     checksums_sha256=sha((dest / 'SHA256SUMS.txt').read_bytes())), indent=2))
@@ -0,0 +1,13 @@
+{
+  "finishedUtc": "2026-09-11T13:22:19.5594542+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "check",
+    "chain",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\harness\\fixtures\\staged-source-authoring\\base\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-chain\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-chain\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,13 @@
+{
+  "finishedUtc": "2026-09-11T13:24:02.7326487+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "check",
+    "chain",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\harness\\fixtures\\staged-source-authoring\\base\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\work\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-chain\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,11 @@
+{
+  "finishedUtc": "2026-09-11T13:23:30.5084646+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "same",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\work\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-chain\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,12 @@
+{
+  "finishedUtc": "2026-09-11T13:21:19.7364277+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "check",
+    "lifeline",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\harness\\fixtures\\staged-source-authoring\\base\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\work\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,31 @@
+{
+  "pid": 7212,
+  "startedUtc": "2026-09-11T13:03:58.0036193+00:00",
+  "sourceManifest": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\contextual-source-20260911/focused5-inputs.json",
+  "artifacts": [
+    {
+      "file": "arcadia-studio.exe",
+      "sha256": "52DE82E434B636E18DB02D381842AA6DB84B721CFFD5502063F784F37246ACCE",
+      "bytes": 112219136
+    },
+    {
+      "file": "libunwind.dll",
+      "sha256": "F45604A12E8BCD839FD86F667C1BE1CC7C4F9DA2B3C69FF381AC708F0E1AE7D4",
+      "bytes": 190976
+    }
+  ],
+  "executable": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin/arcadia-studio.exe",
+  "appData": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/profile/roaming",
+  "localAppData": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/profile/local",
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows",
+  "baseline": [
+    {
+      "Path": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\work\\notes.arcadia",
+      "Hash": "AD9DE02963C20D1F43856455A797DEB05CA674659E45F2C4B96B52783024F8BD"
+    },
+    {
+      "Path": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\work\\project.arcadia",
+      "Hash": "AA844950EC4FB86F262A257E1FC370A26557EA7978D8A4CAB78265037660234C"
+    }
+  ]
+}
@@ -0,0 +1,12 @@
+{
+  "finishedUtc": "2026-09-11T13:16:57.5500788+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "check",
+    "lifeline",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\harness\\fixtures\\staged-source-authoring\\base\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\work\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,12 @@
+{
+  "finishedUtc": "2026-09-11T13:15:10.6924601+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "check",
+    "lifeline",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\harness\\fixtures\\staged-source-authoring\\base\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,11 @@
+{
+  "finishedUtc": "2026-09-11T13:16:24.0252558+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "same",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\baseline\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\work\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,14 @@
+{
+  "finishedUtc": "2026-09-11T13:36:22.5156439+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "check",
+    "machine",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\harness\\fixtures\\staged-source-authoring\\base\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-machine\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-chain\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-machine\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,13 @@
+{
+  "finishedUtc": "2026-09-11T13:27:13.9904642+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "check",
+    "chain",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\harness\\fixtures\\staged-source-authoring\\base\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\work\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-chain\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,11 @@
+{
+  "finishedUtc": "2026-09-11T13:37:09.7213268+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "same",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-chain\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\work\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-machine\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,13 @@
+{
+  "finishedUtc": "2026-09-11T13:28:40.2347350+00:00",
+  "exitCode": 0,
+  "arguments": [
+    "check",
+    "chain",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\harness\\fixtures\\staged-source-authoring\\base\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\work\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-lifeline\\project.arcadia",
+    "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1\\checkpoint-chain\\project.arcadia"
+  ],
+  "runtimePath": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\native-qa\\contextual-source-20260911-v1/bin;C:\\Windows\\System32;C:\\Windows"
+}
@@ -0,0 +1,6 @@
+{
+  "scope": "Read-only repetition to identify first oracle runtime launch failure; fixture remains unchanged",
+  "exitCode": -1073741515,
+  "finishedUtc": "2026-09-11T13:15:40.3853186+00:00",
+  "runtime": "Inherited default PATH, no sibling DLL"
+}
@@ -0,0 +1,25 @@
+arcadia 7;
+project contextual_source_acceptance "Contextual source acceptance" id "d1510000-0000-4000-8000-000000000001" {
+    include "notes.arcadia";
+
+    // The viewpoint is explicit before any lifeline exists.
+    oa_scenario operational_assessment "Operational assessment" id "d1510000-0000-4000-8000-000000000002" {
+        viewpoint OperationalActivity;
+        steps [];
+
+        oa_lifeline assessment_lifeline "Assessment lifeline" id "5b804220-e650-4d82-a39a-271adf5f1075" {
+            description "";
+    
+            represented @assess_incident_work;
+        }
+
+
+    }
+
+    // Contributions are occurrences; root Functions are separate sources.
+    sa_functional_chain system_assessment "System assessment" id "d1510000-0000-4000-8000-000000000003" {
+        steps [];
+    }
+
+    include "oa/activities/activity_assess_incident_work.arcadia";
+}
@@ -0,0 +1,14 @@
+
+sa_actor field_rescue_team "Field rescue team" id "22303f53-1a27-4a99-b89b-b3665772aa42" {
+    description "";
+    parent none;
+
+    sa_state_machine field_team_operating_modes "Field team operating modes" id "0031a486-6026-4784-8a75-4fe501326be4" {
+        description "";
+    
+    }
+
+
+}
+
+
@@ -0,0 +1,37 @@
+
+diagram field_team_operating_modes_states "Field team operating modes · states" id "2c5d54eb-7ca0-427a-a5f3-019e0d119e5c" {
+    description "";
+    layer Sa;
+    projection {
+        StateMachine {
+            machine @field_team_operating_modes;
+        };
+    };
+    routes [];
+    view_options {
+        coverage "All";
+        exchange_labels "Name";
+        hidden_edges [];
+        participant_categories "All";
+        relation_kinds "All";
+        work_categories "All";
+        work_contexts "All";
+    };
+}
+
+
+node field_team_operating_modes_placement id "b8fc5768-79c1-4403-aef1-0b6a69d5584e" {
+    collapsed false;
+    diagram @field_team_operating_modes_states;
+    element @field_team_operating_modes;
+    position {
+        x 60.0;
+        y 60.0;
+    };
+    size {
+        height 104.0;
+        width 336.0;
+    };
+}
+
+
@@ -0,0 +1,45 @@
+arcadia 7;
+project contextual_source_acceptance "Contextual source acceptance" id "d1510000-0000-4000-8000-000000000001" {
+    include "notes.arcadia";
+
+    // The viewpoint is explicit before any lifeline exists.
+    oa_scenario operational_assessment "Operational assessment" id "d1510000-0000-4000-8000-000000000002" {
+        viewpoint OperationalActivity;
+        steps [];
+
+        oa_lifeline assessment_lifeline "Assessment lifeline" id "5b804220-e650-4d82-a39a-271adf5f1075" {
+            description "";
+    
+            represented @assess_incident_work;
+        }
+
+
+    }
+
+    // Contributions are occurrences; root Functions are separate sources.
+    sa_functional_chain system_assessment "System assessment" id "d1510000-0000-4000-8000-000000000003" {
+        steps [ @classify_this_request];
+
+        sa_occurrence classify_this_request "Classify this request" id "d2a47e6b-cd80-4c5f-accb-0057a8bb81d3" {
+            body {
+                Action {
+                    action @classify_request;
+                    lifeline none;
+                };
+            };
+            description "";
+    
+            postcondition "";
+            precondition "";
+        }
+
+
+    }
+
+    include "oa/activities/activity_assess_incident_work.arcadia";
+
+    include "sa/functions/function_classify_request.arcadia";
+
+    include "sa/participants.arcadia";
+    include "views/diagram_field_team_operating_modes_states.arcadia";
+}
@@ -0,0 +1,15 @@
+arcadia 7;
+project contextual_source_acceptance "Contextual source acceptance" id "d1510000-0000-4000-8000-000000000001" {
+    include "notes.arcadia";
+
+    // The viewpoint is explicit before any lifeline exists.
+    oa_scenario operational_assessment "Operational assessment" id "d1510000-0000-4000-8000-000000000002" {
+        viewpoint OperationalActivity;
+        steps [];
+    }
+
+    // Contributions are occurrences; root Functions are separate sources.
+    sa_functional_chain system_assessment "System assessment" id "d1510000-0000-4000-8000-000000000003" {
+        steps [];
+    }
+}
@@ -0,0 +1 @@
+// Preserve this independent engineering note: secours 雨 Δ.
@@ -0,0 +1,7 @@
+
+sa_function classify_request "Classify request" id "d0f64198-5d24-48ea-bd30-6774d07bbe64" {
+    description "";
+    parent none;
+}
+
+
@@ -0,0 +1,42 @@
+arcadia 7;
+project contextual_source_acceptance "Contextual source acceptance" id "d1510000-0000-4000-8000-000000000001" {
+    include "notes.arcadia";
+
+    // The viewpoint is explicit before any lifeline exists.
+    oa_scenario operational_assessment "Operational assessment" id "d1510000-0000-4000-8000-000000000002" {
+        viewpoint OperationalActivity;
+        steps [];
+
+        oa_lifeline assessment_lifeline "Assessment lifeline" id "5b804220-e650-4d82-a39a-271adf5f1075" {
+            description "";
+    
+            represented @assess_incident_work;
+        }
+
+
+    }
+
+    // Contributions are occurrences; root Functions are separate sources.
+    sa_functional_chain system_assessment "System assessment" id "d1510000-0000-4000-8000-000000000003" {
+        steps [ @classify_this_request];
+
+        sa_occurrence classify_this_request "Classify this request" id "d2a47e6b-cd80-4c5f-accb-0057a8bb81d3" {
+            body {
+                Action {
+                    action @classify_request;
+                    lifeline none;
+                };
+            };
+            description "";
+    
+            postcondition "";
+            precondition "";
+        }
+
+
+    }
+
+    include "oa/activities/activity_assess_incident_work.arcadia";
+
+    include "sa/functions/function_classify_request.arcadia";
+}
@@ -0,0 +1,7 @@
+
+oa_activity assess_incident_work "Assess incident work" id "8dfd9cba-0ae7-4ac9-aac4-f9c071fd5f81" {
+    description "";
+    parent none;
+}
+
+
@@ -15,7 +15,11 @@ Copy the whole `base` directory into a new isolated native work directory. Do no
 2. SA Behavior → **System assessment**. Use **Add first function contribution**. Name the contribution **Classify this request**. Open **Create new source**, choose/retain Function and layer-root semantic parent, name it **Classify request**, and **Use**. Apply the retained parent once. Only one root Function and one Action occurrence under the existing chain should be created; the chain steps become exactly `[NEW_CONTRIBUTION]`. Its action is the new Function, lifeline is absent, conditions are empty. An isolated first contribution has no sequence link or allocation.
 3. SA Behavior → **New → State machine**. Name it **Field team operating modes**. Open **Create new owner**, explicitly select **SystemActor**, retain layer-root parent, name it **Field rescue team**, and **Use**. Check **Create the first state view**, then **Create and open** once. Only the root actor, its owned machine, and the opt-in diagram/root placement should be created. The diagram is **Field team operating modes · states**, SA StateMachine projection; default options, no routes/regions/states. Root placement is independently specified at60,60,size336×104 and passed through the shared core Layout command.

-After each creation, Save and preserve a fresh whole-directory **first-commit** checkpoint. Undo **once**, Save and preserve another directory; Redo **once**, Save and preserve another. After all three, use the real file picker to reopen the final project, Save and preserve a final directory. If checking child Use before Apply or cancellation, save into a separate checkpoint and compare against the preceding accepted stage: no staged prerequisite may have been adopted.
+After each creation, Save and preserve a fresh whole-directory **first-commit** checkpoint. Undo **once**, Save and preserve another directory; Redo **once**, Save and preserve another. After all three, use the real file picker to reopen the final project, Save and preserve a final directory.
+
+For an optional staged-only check after child **Use**, inspect or read a snapshot **before any Save**, or explicitly **Cancel the parent draft**, then Save and compare with the preceding accepted stage. Save/Save As is not a passive draft checkpoint: the existing App Save handler applies valid behavior, source and property drafts before saving. Save after Use can therefore atomically adopt the valid parent and its staged prerequisite. That is a Save-adoption route, not evidence that child Use committed early.
+
+Root's native 52DE82 Lifeline trial followed that Save-adoption route: Use returned to the retained parent with two accepted objects and staged **New Activity**; Ctrl+S then adopted Activity plus Lifeline and saved three files. The unchanged complete Lifeline oracle passed. A single Undo returned to two objects; persisted history checks were still ongoing at that observation. The prescribed direct parent Apply/Create route remains a separate native check. All exact source, name, ownership and identity expectations remain unchanged.

 All source/consumer names, ownership, references, defaults, membership and view geometry above are fixed expectations. The oracle borrows only unique fresh UUIDv4 roles by exact kind/layer/name (plus view projection and placement target). It never copies observed aliases, descriptions, parents, bodies, geometry, source text or diagrams wholesale. Every existing source byte and complete model field is compared after constructing the expected core-command result.

@@ -23,6 +27,8 @@ All source/consumer names, ownership, references, defaults, membership and view

 After a root-authorized direct-rustc build using a matching completed `oa_core` rlib and `--edition2024 -D warnings`, let `$oracle` identify that immutable executable and `$base` the frozen baseline entry. Other variables below are preserved entry-file paths:

+Run the Windows gnullvm oracle with its matching verified runtime available, either beside the executable or through a process-scoped PATH containing the verified runtime directory and Windows system directories. Do not assume the standalone oracle directory includes `libunwind.dll`. Check the process exit status as well as its output: root's initial invocation without the runtime failed in the loader with `-1073741515` and no oracle log. A scoped PATH to the verified native 52DE82 bin plus Windows allowed the unchanged oracle to run and pass the Lifeline check. No machine-wide PATH change or oracle rebuild is required.
+
 ```powershell
 & $oracle self-check $base
 & $oracle check baseline $base $base
@@ -0,0 +1,54 @@
+# Independent contextual source layout review — 2026-09-11
+
+Codex-9e8r6t /root/behavior_audit. **Source review closed after one concrete visibility correction; no remaining material finding in the bounded slice.** Prepared tests, compilation and native acceptance remain distinct. This reviewer made no production changes, compiler execution, Git mutation or native input.
+
+## Observed acceptance boundary
+
+Read Gitea issue 1 and issue 2, current AGENTS instructions, the Authoring20260911 Wiki and `release-contextual-source-layout-review-20260911.md`. Independently inspected the supplied screenshot `.local/native-qa/contextual-source-20260911-v1/oa-source-open-clipped-name.png`, SHA256 `e59f32d493fe1c46981ed74e85fa622c0eaaafe01ce33aa04da9e5a4bbce9fb7d`.
+
+The image confirms the source Name input is focused but mostly clipped below the approximately 130px inner viewport. Introductory heading/context/explanation and the single Activity action precede the input; Back/Use remains visible below the scroller. The unchanged immutable GUI is `52DE82E434B636E18DB02D381842AA6DB84B721CFFD5502063F784F37246ACCE` at the root-reported 1100×700 client size.
+
+Root ratified essentials-first presentation confined to `behavior/source_draft.rs`. This adjacent correction does not close issue 2 or take ownership of the external process/scenario canvas design, workspace allocation or FormShown/focus changes. Source/consumer names, typed source selection, semantic ownership, invocation tokens, draft/recovery and final atomic admission remain existing contracts.
+
+## Independent review targets
+
+- At zero source-body scroll, the short actual composition must expose the complete Name input, current permitted/selected kind and current layer-root parent summary. Multiple permitted kinds must remain explicit choices rather than an implicit semantic selection.
+- Long context or recovered selected-parent names must not displace the initial Name or pinned Back/Use footer. Any shortened presentation must leave the raw source/consumer/parent state exact.
+- The inner source field scroller remains bounded and independent; Back/Use stays outside it. Rendering and presentation controls must not mutate the accepted model/source, alter invocation guards or change canvas scroll/focus state.
+- The mounted regression must meaningfully distinguish the old intro-first layout at the observed short height. A unit renderer with zero paragraph bounds or a footer-only assertion is insufficient evidence for this failure.
+
+The author accepted the last concern before freeze: the test renderer uses `iced::advanced::graphics::text::Paragraph` for real text shaping. This is meaningful nonzero paragraph geometry, while still requiring the native font/layout check below.
+
+## Concrete finding and correction
+
+The first freeze, `source_draft.rs` SHA256 `1b5a0ec54e6cc9746f4664b70d7db79ebc769284953d1d679d15d9b0f15a9bb7`, put the complete selected-parent name/kind/alias before the multi-kind row. A recovered ParticipantInteraction draft can have an arbitrarily long existing Entity parent: `validation::parent_permits` permits an Actor/Entity/Role under that Entity. The unbounded wrapping therefore pushes every explicit Entity/Actor/Role choice below the short viewport. The initial long-parent test used single-kind Work and increased total host height to 235px, so it did not falsify this case.
+
+This was a usability/coverage finding, not a source-command or recovery corruption. Sent the concrete counterexample to root and the author before compilation. The corrected freeze moves the wrapped explicit choices before the parent summary. Full authored parent detail remains available in the scroller; it is not truncated in state or falsely claimed to fit arbitrary text into 130px.
+
+Readback at SHA256 **`89b08ef68f5c28e28f2f9feaebe67e0be5b84efca1bfa6d64b4029c965701de4`** closes the finding. The extended long-parent test serializes/reloads an OA ParticipantInteraction draft with selected Actor and a long existing Entity parent, then mounts the same **340×215** composition. It requires all three kind rectangles and Name to fit inside the initial field viewport; all kinds precede the parent; the parent label/first line begins visibly; the full summary actually exceeds the viewport height; full parent name/alias and raw recovered state remain exact. The initial parent-before-kind freeze would fail these conditions.
+
+## Final implementation and test readback
+
+At `source_draft.rs:327`, a compact heading precedes the 14-point Name input. A single allowed kind replaces its redundant button only when it equals the actual draft kind. A missing/invalid single-kind recovery keeps an explicit repair action; rendering does not select a kind. Multi-kind actions remain individually token-bound and styled for the selected kind, inside a wrapped row before the parent summary at lines 343–384. The longer contextual/atomic explanation follows the essentials.
+
+Compared the original committed file from Gitea MCP at `df6f59562643b7771ecf0c972f8655f3e3f1c4da` with the reviewed source using explicit UTF-8 and normalized line endings. The MCP bytes independently match their declared Git blob `7c5dced53d38567c6b4d250bde553ef74fc1d940`. All pre-view state/serialization/token/update/combination code, `Draft::command`, existing parent search/pagination/actions and pinned footer are unchanged. An initial comparison used Windows' default local-file encoding; repeating with explicit UTF-8 removed that harness-only text mismatch. There was no MCP or production encoding defect.
+
+The `behavior-source-fields` scroller and `behavior-source-actions` footer keep their existing identities, bounded Fill composition and separation. Name remains `NAME_INPUT`. No App, scenario/topology workspace allocation, FormShown event, canvas viewport/scroll state, source planner or semantic guard changed in this source-card correction. The real scenario and topology child hosts were read back: both render a 12-point retained consumer caption, 6px gap and child Fill; the test reproduces that composition at the observed short total height. The machine host has the same shape with its own caption.
+
+Three prepared test functions cover:
+
+- OA/SA Work, four strict lifeline viewpoints and both machine layers at 340/500 widths and 215px total height; nonzero actual paragraphs, zero scroll offset, measured 125–132px field viewport, fully contained Name/root-parent/explicit-kind rectangles, footer containment/separation, and missing single-kind recovery.
+- Moderate wrapped selected-parent and long Unicode caption controls, plus the corrected overflowing multi-kind recovery case at the same minimum height, with exact raw name/parent snapshot retention.
+- Actual mounted mouse press/release events for each OA participant kind and focused Unicode Name input. Emitted events carry the current token; handling the Name event preserves the accepted Project and does not implicitly choose a kind. The kind-click portion checks event production, not subsequent semantic adoption.
+
+These assertions address the observed clipping and the independent counterexample. They are prepared source evidence at this handoff, not a test pass or native result. The full scenario/topology workspace is not mounted by these new tests; root's actual host/native check remains necessary.
+
+## Adjacent staged-owner caption readback
+
+Palette requested the coordinated readback before the same combined gate. At `creation.rs` SHA256 **`0fb19be3a5688c4bd3ca3643c47a97da7e7f85add8a860cd046a0d9cb3ce9dfc`**, the narrow `picker_view` delta suppresses the misleading accepted-catalog Selected/Missing row only when Owner selection exactly matches `State::label`'s staged draft ID. That case already has the explicit New owner label above and now offers the correctly named existing-participant alternative. A different or genuinely missing accepted owner still takes the existing reference-label path; Context behavior, choice eligibility, search and event dispatch remain unchanged. No material finding in this display-only delta; no new execution claimed.
+
+## Remaining acceptance and scope
+
+Author owns the serialized focused compile/tests and matching GUI/lint. Root must use the rebuilt artifact at actual 1100×700 with ordinary panels: open the source child without scrolling, see complete Name/current kind/root parent, type visibly, confirm Back/Use reachability, and repeat a multi-kind/long-parent recovery and wider-host control. Full overflow text may scroll below the visible parent-label beginning. Rendering must leave accepted model/source and canvas offsets unchanged; semantic adoption/history still uses the independent existing oracle.
+
+The first GUI52DE82 observation and its original evidence remain unchanged. Source closure here neither transfers native acceptance from that old binary nor closes issue 2's broader canvas-workflow requirement. Only this new independent report was written by the reviewer; prior reports, production and common ledgers remain under their assigned owners.
@@ -0,0 +1,68 @@
+# Contextual source form: minimum-height review, 2026-09-11
+
+Codex-9e8r6t /root/release_audit. Bounded read-only investigation requested by root after native use of committed source `df6f59562643b7771ecf0c972f8655f3e3f1c4da`, Windows GUI `52DE82E434B636E18DB02D381842AA6DB84B721CFFD5502063F784F37246ACCE`. Only this new report was written. No production changes, compiler, tests, native input, Git changes or new native acceptance are claimed.
+
+## Observed defect and cause
+
+Root opened the fixed staged-source baseline at client size 1100×700 with ordinary side panels, used the empty OA Scenario's Lifeline action, named the consumer `Assessment lifeline`, then opened Create new source. I inspected the supplied screenshot `.local/native-qa/contextual-source-20260911-v1/oa-source-open-clipped-name.png` (SHA-256 `E59F32D493FE1C46981ED74E85FA622C0EAAFE01CE33AA04DA9E5A4BBCE9FB7D`; complete image is 1102×732 including window frame). Name receives focus but is only partly visible. The first meaningful input therefore requires an unexplained scroll before comfortable typing. Root reports that one downward body scroll of 173 pixels reveals Name, semantic parent and Use layer root; this latter operation was not independently repeated by this worker.
+
+The screenshot and code agree on three contributing layers:
+
+1. `behavior/scenario/workspace.rs:641` allocates both the canvas and pending form `Fill` inside the same column, dividing their remaining height equally. The still-mounted empty canvas occupies approximately y246–460. The form's retained consumer caption starts near y476.
+2. The source card's 12-pixel padding, pinned footer and 10-pixel separation leave its inner `behavior-source-fields` viewport only about y501–631, or 130 pixels. Pinned Back/Use starts near y642 and remains reachable; moving the footer into the scroller would lose a behavior that is currently correct.
+3. `behavior/source_draft.rs:328–357` puts an 18-point heading, the owner/viewpoint sentence, the transaction explanation, and a separate Activity button before Name, with 8-pixel gaps. Name starts near y619, leaving only about 12 pixels before the viewport clips. This is introductory-content ordering compounded by the actual host height, not a failure to give Name keyboard focus. `app.rs:2393` issues `operation::focus(NAME_INPUT)` and does not reveal it inside this child scroller.
+
+The multiple-kind cases can consume more space: `source_draft.rs:341` adds each of the two or three valid kinds as a separate vertical button. `topology/view.rs:659` likewise divides diagram/form height equally, so it has the same structural exposure. New-machine creation uses the same child card, although its host differs. This review does not assert a separately observed native failure in those adapters.
+
+The passing regression at `behavior/contextual_source_tests.rs:741` is narrower than this outcome. It mounts the source card alone at 340×320 and 500×570 using the unit renderer, and asserts only the footer and scroller geometry. It neither supplies the roughly 194-pixel child height seen here nor checks the Name or parent-summary bounds. The test correctly established a pinned footer; it did not establish initial input visibility or native text wrapping.
+
+## Two bounded alternatives
+
+| Approach | Concrete change | Benefit and cost |
+| --- | --- | --- |
+| **A — compact essential fields first (recommended)** | Change only the shared source-card presentation. Start with a compact title, then Name, a single wrapped row of explicit kind choices when there are several, then the visible semantic-parent summary. For the single permissible Activity/Function case, name that already determined kind in the compact heading instead of spending a row on its redundant choice button. Put the longer consumer/viewpoint explanation and transaction guidance after these essentials; keep all current parent-search/selection controls and the pinned Back/Use footer. | Fits the observed initial root-parent workflow in substantially fewer rows and helps all three adapters. It does not alter workspace allocation, scroll restoration, focus events, draft fields or semantic defaults. The existing retained consumer caption and selected behavior header continue to orient the engineer. Full names/ownership data remain authored as before; only explanatory ordering and bounded kind presentation change. Parent search/help may still need scrolling, appropriately after the initial fields. Actual font/layout measurement is still required before claiming fit. |
+| B — give an open child more workspace height | While a source child is open, allocate a larger share of the current canvas/form split to its editor (for example, a measured 1:3 canvas:form candidate), retaining the mounted canvas and its identity. Restore ordinary proportions on Back/Use. | Gives the observed OA card more room without substantially reordering it and leaves more explanatory context visible. It reduces the diagram context and changes the measured canvas viewport/Fit result. A ratio alone is not a guarantee for long owner text or several vertical kind buttons. It requires changes in both scenario and topology host layout plus restoration tests, overlapping the separately owned workspace/FormShown work. It is a broader and less reliable first fix for this particular card. |
+
+A is the smallest coherent correction for the observed first-action failure. Its acceptance target is the actual initial Name, explicit valid kind and current root-parent summary, not a smaller font everywhere or a requirement that the engineer press Focus canvas. Do not remove the semantic-parent summary, silently choose System/Actor, merge source/consumer names, or mutate/scroll the diagram to make room. A full source-name-first row also avoids pushing focus below an unusually long contextual sentence. Very long recovered parent labels still need an explicit readability check; their bytes must not be shortened in state.
+
+Automatic focus-and-reveal alone would hide the introductory kind choice above Name in multi-kind cases and introduce another asynchronous focus/scroll route. It is not the recommended substitute for sensible field ordering. Any later such work must reuse the authoritative host's FormShown/focus design.
+
+## Proposed regression and acceptance
+
+After root ratifies a presentation edit, extend `contextual_source_tests.rs` rather than changing command tests merely to match widget order. Mount the real child with its retained consumer caption at the observed short height, and add a host-composition case using the normal scenario and topology split. Start at zero child scroll offset; inspect the full `NAME_INPUT` rectangle, the semantic-parent summary and each visible explicit-kind action against the actual child clip rectangle. Assert the Name rectangle is fully contained, the initial layer-root summary is visible, and Back/Use remains outside the field scroller and within the host. A stable test-only-readable container ID for the parent summary is sufficient; no new semantic state is needed.
+
+Cover OA Activity, SA Function, the two/three-choice participant cases and an unnamed machine parent. Keep source and consumer names distinct; typing into the visible source field must retain the exact parent draft and accepted Project/SourceBundle. Include a long Unicode consumer heading and a recovered nested semantic parent as readability controls. Unit-renderer geometry alone must not be labeled proof of native paragraph wrapping. Pair it with root's 1100×700 normal-panels screenshot/action check on the rebuilt candidate: open child, see the complete Name/current kind/root ownership before any manual scroll, type, inspect Back/Use, then separately complete the existing semantic oracle workflow. Also check the wider window without changing model or canvas offsets during mere rendering.
+
+No new execution is part of this report. Existing focused 23, guide 3, strict lint/build/fmt and predecessor full 675 evidence retain their original scopes; they do not invalidate or cover up this native usability finding.
+
+## Ownership and broader context
+
+Current issue 2, `Process & scenario diagrams approach`, is owned for coherent canvas design by Codex-956atf (comments 243–244). Their chooser/FormShown/workspace changes remain separate. This source-card recommendation can be implemented in `behavior/source_draft.rs` and its owned focused tests after root's current immutable native trial; no shared scenario/App/focus changes are proposed in A. It does not close issue 2 or propose a parallel canvas redesign. Root decides timing, integration and native acceptance.
+
+## Ratified implementation: source freeze, gates pending
+
+Root ratified alternative A after the read-only recommendation. Only `behavior/source_draft.rs` changes in production: compact 14-point heading and Name, a wrapped row for multiple kinds, then explicit unchanged semantic-parent text before the longer context/explanation and existing parent controls. A single determined kind is shown in the heading only when it equals the draft's actual selected kind. An incomplete recovered single-kind draft still gets its explicit repair button; rendering never picks a missing kind. No command, draft field, token, identity, validation, event admission, App focus or host geometry changed.
+
+Three new nested `contextual_source_layout_*` tests use Iced's real graphics Paragraph shaping through a drawing-free renderer. They mount the source card with its retained consumer caption at 215 pixels total height, measure an approximately 130-pixel field viewport, and check full Name/root-parent/explicit-kind bounds, pinned footer, actual kind clicks and Unicode text input. The matrix covers OA/SA Work, four strict lifeline viewpoints, both machine layers, incomplete single-kind recovery, and a long wrapped selected semantic parent/consumer caption. These are prepared tests until terminal evidence below; they do not replace root's rebuilt native screenshot gate. The previous unit-renderer footer test remains unchanged and honestly scoped.
+
+All new logs, statuses, input snapshots and distinct artifacts will be retained under `.local/contextual-source-layout-20260911/`. The old GUI52DE82 and evidence remain unchanged. No full 676 rerun is planned for this presentation-only correction.
+
+Independent readback caught a long-parent composition edge in the first draft of A: placing an unbounded recovered parent paragraph before the kind row could hide the explicit choices. The corrected source moves the kind row ahead of that paragraph. The regression now includes a recovered ParticipantInteraction draft with a deliberately overflowing Entity parent at the same 340×215 composed host: Name and all three choices remain fully visible; the parent label/first line begins inside the viewport, while its complete unchanged name/alias can scroll. This does not pretend unlimited authored text can fit in a finite panel. The usual initial layer-root summary remains fully visible. Reviewer confirmed the semantic/token prefix, Draft::command, existing parent controls and footer are byte-identical when compared as UTF-8.
+
+The compiler remains unstarted while a separate root-authorized worker finishes the `creation.rs` staged-owner caption correction. Its ownership and any shared final gate scope will be recorded separately; no source-card permission is inferred for that file.
+
+### First compile boundary and corrected gate
+
+`focused1.log` / `focused1-status.json` preserve Cargo exit101 before any tests: two test-helper errors were a glob/prelude `column!` ambiguity and use of the static-string widget Id constructor for a formatted String. Both were corrected only in the test helper (`iced::widget::column!`, `Id::from(String)`); production presentation remained unchanged. `inputs3.json` is the corrected source freeze; the earlier inputs1/2 remain explicitly prior/unexecuted or failed snapshots. The corrected focused2/Clippy/fmt/GUI runner is active, with all files under the new evidence directory. If interrupted before a per-gate terminal JSON, that gate is incomplete and has no pass claim.
+
+Root separately verified the original GUI52 machine Create+Save through its six-file oracle. That is native evidence for the prior binary and does not validate the still-building presentation candidate; root owns its full native report and subsequent history checks.
+
+### Reboot checkpoint — explicitly interrupted, not a pass/failure
+
+User announced an imminent reboot and asked to save progress. Root directed this worker to stop further gates. Ctrl+C was sent to the owned PowerShell/Cargo session2067; the session returned exit1 due to interruption. A subsequent Windows process inventory found no cargo.exe, rustc.exe, clippy-driver.exe, clang.exe, ld.lld.exe or lld-link.exe remaining. No forced Stop-Process was necessary and no owned process remains. The corrected focused2 compilation produced only its initial compilation line; no tests ran and there is no terminal Cargo/test result. The earlier focused1 Cargo101 remains an actual, separate test-helper compile failure.
+
+Durable records: `.local/contextual-source-layout-20260911/focused2-interrupted.json`, `process-cleanup.json`, `run-observation.json`, the untouched raw `focused2.log`, and `inputs3.json`. Every recorded input hash was rechecked unchanged during shutdown preparation. Clippy/fmt/GUI stages were never launched. No distinct GUI stage exists; do not reuse the earlier GUI52 acceptance as validation of this WIP.
+
+Frozen source changes for root's unvalidated WIP checkpoint: `crates/oa-desktop/src/behavior/source_draft.rs` SHA256 `C8D36BD6BCD0818AAD2FBBC404B29085F4ADCAF8191B95A04208A7C2346C36E0` (reviewed presentation plus three prepared real-paragraph layout tests and the two mechanical compile fixes); separately owned `behavior/creation.rs` SHA256 `0FB19BE3A5688C4BD3CA3643C47A97DA7E7F85ADD8A860CD046A0D9CB3CE9DFC` (staged-owner caption). All source, logs and intermediate outputs were preserved. No index, commit, push, native UI or reboot operation was performed by this worker.
+
+After reboot, verify these source/input hashes and coordinate the compiler lease, then use a fresh focused3 log/status/runner name because the existing runners intentionally refuse overwrite. The next focused filter remains `contextual_source`, expected26 tests (the previous23 plus three prepared layout tests); that count is an expectation until compilation and execution succeed. Then run strict all-target Clippy, formatting and matching distinct GUI build/staging. A broader full-suite rerun remains root's decision, not an automatic continuation.
@@ -0,0 +1,123 @@
+# Contextual prerequisite creation — native Windows acceptance
+
+Codex-9e8r6t /root, 2026-09-11. Paused at the user's requested reboot.
+Machine Create/Save and Undo/Save passed; its Redo, final reopen,
+broader cancellation/recovery and corrected-layout acceptance remain open.
+
+## Artifact and predetermined contract
+
+Native input uses the immutable GUI `52DE82E434B636E18DB02D381842AA6DB84B721CFFD5502063F784F37246ACCE`
+and matching `F45604A1…` libunwind in
+`.local/native-qa/contextual-source-20260911-v1/bin`. Its launch script checked
+all 238 frozen build inputs and both artifact hashes, created a fresh private
+profile and copied only the frozen fixture. PID 7212 launched normally;
+captured Home had no recent models. Actual window resizing produced a
+1100×700 client. Open used the real file picker and the copied project.
+The source was subsequently committed/pushed in `df6f595`; later layout edits
+do not change this running artifact. Full earlier 675 versus final focused 23,
+guide 3, strict Clippy/build/formatting scopes remain in the implementation report.
+
+The independent [fixture and steps](fixtures/staged-source-authoring/README.md)
+predate produced output. Unchanged oracle SHA256
+`967D9BA3C6FB3A7EFB410833903EC94556CA2D48A67D5072C8BB160F40A00F9C`
+compares complete expected Project, reachable SourceBundle and physical files.
+Each original first-commit checkpoint separately supplies only fresh role UUIDs;
+prior-stage identities cannot be replaced by later output. The precise
+known-detached-file rule applies to Undo, without a broad orphan exemption.
+
+## Operational lifeline — Save adoption variant
+
+At minimum size with both side panels, the empty Operational assessment scenario
+showed **Add first lifeline**. Entered `Assessment lifeline`, opened **Create new
+source**, retained explicit Activity and OA layer root, and entered
+`Assess incident work`. **Use this new source** returned to the parent,
+preserving the independent lifeline name and displaying the staged Activity.
+The accepted object count stayed at two at that observation.
+
+Ctrl+S then applied the valid parent and saved the Activity and Lifeline together.
+The full Lifeline oracle passed all three source/disk files and every expected
+model field. One Undo/Save restored the exact original two-source model and
+three physical files, with only the explicitly proven retained activity file.
+One Redo/Save passed the complete Lifeline prediction using its original
+first-commit identities. No allocation, occurrence or diagram was created.
+This establishes the Save-adoption route; the direct Lifeline Create button was
+not used in this trial. The isolated UI/source histories are preserved under
+`checkpoint-lifeline`, `checkpoint-lifeline-undo`, `checkpoint-lifeline-redo`.
+
+## System chain — direct Create route
+
+Switching to SA selected the empty System assessment chain and showed **Add
+first function contribution**. Entered `Classify this request`, opened source
+creation, retained Function and SA layer root, and entered `Classify request`.
+Child Use returned to the parent. A read-only disk check at that point still
+matched the original Lifeline stage exactly; no Save was invoked. Scrolling the
+parent revealed its retained contribution name. **Create**, then Save, passed
+the complete Chain prediction, four exact source/disk files, and all original
+earlier-stage identifiers. There is one Action under the existing chain, no
+sequence link, implicit allocation or lifeline. `checkpoint-chain` retains the
+first accepted result. One Undo/Save exactly restored the Lifeline model and
+three reachable files with only the proven retained Function file. One
+Redo/Save passed the complete Chain prediction and original Lifeline/Chain
+identities. The three chain checkpoints and individual exit/log records are retained.
+
+## System machine — direct creation and Undo before reboot
+
+Entered `Field team operating modes`, opened Create new owner, explicitly chose
+System actor at the SA root and entered `Field rescue team`. Escape before Use
+returned to the unchanged parent machine name. Reopening the child started a
+fresh blank draft: unadopted child input is discarded, not retained. A read-only
+disk check still matched the Chain checkpoint. Reentered the explicit kind/name
+and chose Use; the parent showed the staged owner while accepted source files
+still matched Chain. Checked **Create the first state view**, then clicked
+**Create and open** and saved. The complete Machine oracle passed all six exact
+source/disk files and original role UUIDs: owner, machine, requested diagram and
+root placement, without regions or states. `checkpoint-machine` is immutable.
+
+One Undo/Save restored the complete Chain model and its four reachable sources;
+the six physical files matched exactly, including only two proven retained
+files. `checkpoint-machine-undo` preserves this result. The user then requested
+a reboot. The GUI showed All changes saved and was closed normally; refreshed
+window inventory confirmed its absence at 13:38 UTC. The live work directory is
+the saved Undo state. In-memory history is no longer available: do not claim or
+try to infer a Redo pass after relaunch. Preserve the original machine checkpoint
+for an isolated reopen check and use a separate fresh trial for missing history
+coverage. Earlier Lifeline and Chain Redo passes remain valid.
+
+The original GUI falsely showed `Selected: Missing element` in the accepted-owner
+picker despite the valid staged New owner summary. A reviewed display-only
+`creation.rs` correction is frozen with the source-card layout change; its build
+was interrupted for the reboot, and no corrected native pass is claimed.
+
+## Findings and corrected test assumptions
+
+- The initial OA child form partly clips its focused Name field. Its roughly
+  130-pixel body places about 118 pixels of introductory content first. One
+  ordinary scroll reveals Name and current semantic parent; both Back/Use stay
+  pinned. The screenshot `oa-source-open-clipped-name.png` precedes any fix.
+  The bounded layout review assigns an essentials-first correction without
+  changing shared workspace geometry; this artifact is not its acceptance.
+- The process parent puts its contribution name below existing-source search
+  and empty paging controls. Ordinary scrolling finds it and its raw value is
+  retained. This flow does not close user issue 2's consistent canvas requirement.
+- The optional fixture instruction to Save a staged-only checkpoint was wrong.
+  Existing App Save calls `apply_behavior`, `apply_source`, `apply` before disk
+  save. Source inspection and native behavior agree. The fixture README/report
+  correct the procedure, without changing any oracle model/source expectations.
+- The first oracle launch had no sibling runtime DLL and exited before any
+  oracle output. A read-only baseline repetition recorded loader exit
+  `-1073741515`. The root checker now scopes PATH to the verified native bin and
+  Windows directories and records every exit. The unchanged oracle then passed;
+  no semantic failure was silently retried or relabeled as an environment failure.
+
+Raw launch/check scripts live in `.local/native-qa/`; all images, checker logs,
+exit records, source checkpoints and the runtime-failure record are in the v1
+directory. They remain distinct from the old scenario v5/D4D9 evidence and later
+layout artifacts. No Linux or final product acceptance is claimed.
+
+The reboot checkpoint is now archived with exact readback in
+[experiments/contextual-source-native-20260911](experiments/contextual-source-native-20260911/README.md).
+Its manifest maps 77 original records to 51 unique payloads, transparently
+deduplicating 35 physical source files to nine distinct byte sequences. Manifest
+SHA256 `9a2ad6fb186606ef2a4fd1101d68c8e45bc96953093670fe9451ed9fb90a2ea6`.
+Mutable work, profiles and binaries were excluded; original provenance is bound
+to the previously committed contextual-source archive.
@@ -0,0 +1,87 @@
+# Staged machine owner display correction — 2026-09-11
+
+Owner: Codex-9e8r6t `/root/palette_finish`. Root authorized only the display path
+in `crates/oa-desktop/src/behavior/creation.rs` and this report. No compiler,
+native input, Git operations or changes to source-draft/command/recovery code
+were made. The existing-source chooser remains owned by its existing worker.
+
+## Observed problem and cause
+
+On immutable GUI 52DE82 at 1100×700, root created a pending SA machine named
+`Field team operating modes`, opened Create new owner, explicitly chose
+SystemActor `Field rescue team`, then Use. The parent correctly displayed
+`New · System actor · Field rescue team`, but its ordinary owner picker also
+displayed `Selected: Missing element — choose a replacement` and a no-matching
+participant prompt. Root's screenshot is
+`.local/native-qa/contextual-source-20260911-v1/sa-machine-staged-false-missing.png`.
+
+`picker_view` looked up every selected ID through `reference_label` against the
+accepted Project. The staged owner's reserved ID intentionally is absent from
+that catalog. The parent already renders `d.source.label(d.owner)` above the
+picker; that helper returns a label only when the staged draft's ID equals the
+currently selected ID. The incorrect warning came from the redundant accepted
+catalog lookup, not from a missing staged owner.
+
+## Frozen correction
+
+Only four display changes in `picker_view`:
+
+```diff
+     let selected = match picker {
+         Picker::Owner => d.owner,
+         Picker::Context => d.context,
+     };
+    let staged_owner = picker == Picker::Owner && d.source.label(selected).is_some();
+     let title = match picker {
+        Picker::Owner if staged_owner => "Or choose an existing participant",
+         Picker::Owner => "Owned by participant",
+         Picker::Context => "Scenario context · optional",
+     };
+```
+
+```diff
+-    if let Some(id) = selected {
+    if let Some(id) = selected
+        && !staged_owner
+    {
+         out = out.push(text(format!("Selected: {}", reference_label(p, id))).size(12));
+```
+
+```diff
+         out = out.push(text(match picker {
+            Picker::Owner if staged_owner => "No existing participants match this search. The new owner above remains selected.",
+             Picker::Owner => "No matching participant. Refine the search or choose Create new owner.",
+```
+
+The selected staged owner is shown once by the existing New label. Existing
+participants remain searchable/selectable as explicit alternatives. No staged
+record is injected into `Project`, `choices`, pagination or accepted catalog
+membership. The source labels, choice messages, validation, command batches,
+reserved IDs, commit behavior and recovery state are unchanged.
+
+Frozen `creation.rs` SHA256:
+`0fb19be3a5688c4bd3ca3643c47a97da7e7f85add8a860cd046a0d9cb3ce9dfc`.
+The exact delta and hash were sent to `behavior_audit`; `release_audit` is
+coordinating the combined source freeze and compiler gate.
+
+## Source-backed controls and native follow-up
+
+| State | Result of the new condition |
+| --- | --- |
+| Owner ID equals active staged source ID | New owner label remains; accepted-catalog missing row is omitted; empty search explains the new owner remains selected |
+| Existing accepted owner selected while a different staged draft is retained | `State::label` returns None; ordinary selected owner label and search behavior remain |
+| Missing accepted owner ID with no matching staged ID | Original `reference_label` missing-element warning remains |
+| No owner selected | Existing no-selection/empty-catalog guidance remains |
+| Scenario context picker, including a stale context | Owner-only condition is false; original context label, missing warning and empty-context behavior remain |
+
+These are source-path checks, not executed widget tests. No broad new test was
+added for this wording/condition correction, as requested. No compile or native
+pass is claimed here.
+
+Root's acceptance path: on the matching rebuilt GUI, repeat the exact minimum
+window machine/owner route, confirm the New owner appears once without the false
+missing warning, and confirm search/selection of an existing owner still works.
+For an empty or unmatched accepted catalog, the text must distinguish existing
+choices from the selected staged owner. Retain a separate real missing accepted
+owner control in source/recovery review. The independently specified machine,
+owner, first-view and one-step history/source oracle remains unchanged.
@@ -23,3 +23,11 @@ rustc --edition 2024 -D warnings --crate-name staged_source_authoring_contract h
 Compilation passed in **7.566s**, finished **12:01:48 UTC**. Compiler lease was immediately returned to the desktop owner before isolated runtime checks. Both `self-check BASE` and `check baseline BASE BASE` passed. All previously listed evaluator falsifiers ran, including stronger separate prior-stage identity pinning. Expected stages have3/4/6 reachable files; baseline has2. This supersedes the preceding preparation-only status without implying any produced native-output acceptance. No generator is necessary: the fixed source fixture itself is the input.

 Executable: `.local/staged-source-oracle-20260911/staged-source-authoring-contract.exe`,20864512 bytes,SHA256 **`967D9BA3C6FB3A7EFB410833903EC94556CA2D48A67D5072C8BB160F40A00F9C`**. Source SHA256 `9EB9DD3868B6CB772F907D16AE02995AD10A16F85C087012C24948E6E6FE775D`. Runtime evidence and manifest are in that same private directory: `build-initial.log` (empty successful diagnostics), `build-initial-result.json`, `self-check-initial.log` (SHA256 `6114C5BF9B75A27B4333E3DE38B3CAB08B976B2F01F3158AD8A7127FF7EE0ABB`), `baseline-check.log` (SHA256 `2D82DF14FB345414E164B57177D5A21C426F65C18EB5EF9E010984A92AD2E731`), `checks-initial-result.json` and `manifest.json`. No baseline or produced model files were mutated.
+
+## Native procedure and runtime correction — 2026-09-11
+
+Root's native 52DE82 trial exposed a harness procedure mismatch. The optional README instruction to Save after child Use and expect the preceding accepted stage was wrong: existing `App::Message::Save` handling in `crates/oa-desktop/src/app.rs` calls `apply_behavior()`, `apply_source()` and `apply()` before `save_to`. Save can adopt a valid parent draft. The corrected optional check inspects a snapshot before any Save, or explicitly cancels the parent before Save. This does not change the frozen oracle or its complete semantic/source/identity expectations.
+
+Observed route: child Use returned to the retained Lifeline parent with two accepted objects and a staged New Activity. Ctrl+S then atomically adopted Activity plus Lifeline and saved three files. The unchanged Lifeline oracle passed. One Undo returned to two objects; persisted history checking was ongoing at that observation. This is a **Save-adoption variant**. It does not show that Use committed prematurely, or establish the separately prescribed direct Apply/Create route.
+
+The initial root oracle invocation also failed before execution because its private directory lacked sibling `libunwind.dll`: loader exit **-1073741515**, with no oracle log. A read-only baseline invocation reproduced that environment failure. Root scoped PATH to the verified native 52DE82 bin and Windows directories; the unchanged executable SHA256 `967D9BA3C6FB3A7EFB410833903EC94556CA2D48A67D5072C8BB160F40A00F9C` then passed the Lifeline check. The README now requires an available matching runtime and explicit process-exit inspection. Earlier build/self-check records retain their original scope; an empty output file is not a pass, and a bare executable path does not promise a self-contained runtime. No runtime copying, native input, compilation or oracle-source edit was performed for this documentation correction.
				`@@ -0,0 +1 @@`
				`Compiling oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)`
				`@@ -0,0 +1 @@`
				`PASS Chain: complete Project + 4 exact source/disk files, original role UUIDs`
				`@@ -0,0 +1 @@`
				`PASS exact model/identity/3 reachable sources; 4 exact disk files (1 proven retained)`
				`@@ -0,0 +1 @@`
				`PASS Lifeline: complete Project + 3 exact source/disk files, original role UUIDs`
				`@@ -0,0 +1 @@`
				`PASS exact model/identity/2 reachable sources; 3 exact disk files (1 proven retained)`
				`@@ -0,0 +1 @@`
				`PASS Machine: complete Project + 6 exact source/disk files, original role UUIDs`
				`@@ -0,0 +1 @@`
				`PASS exact model/identity/4 reachable sources; 6 exact disk files (2 proven retained)`
				`@@ -0,0 +1 @@`
				`// Preserve this independent engineering note: secours 雨 Δ.`